Authentication Bypass Using an Alternate Path or Channel vulnerability in Drupal Microsoft Entra ID SSO Login allows Privilege Escalation.This issue affects Microsoft Entra ID SSO Login: from 0.0.0 before 1.0.4.
CVSS 3.1MEDIUM 6.5·Network·No auth·No interaction·EPSS 0.00229·Published 2026-02-04·Fixed in 1.0.4CWE-288