Vulnerabilities

TI-2025-23140 CVE-2025-32016 · GHSA-rpq8-q44m-2rpg

Microsoft Identity Web Exposes Client Secrets and Certificate Information in Service Logs

LOW 20

Microsoft Identity Web is a library which contains a set of reusable classes used in conjunction with ASP.NET Core for integrating with the Microsoft identity platform (formerly Azure AD v2.0 endpoint) and AAD B2C.

CVSS 3.1MEDIUM 4.7 Local Low privileges No interaction EPSS 0.00098 Published 2025-04-09 Fixed in 3.8.2, 9.0.0 CWE-532

TI-2024-17948 CVE-2024-27086 · GHSA-x674-v45j-fwxw

MSAL.NET applications targeting Xamarin Android and .NET Android (MAUI) susceptible to local denial of service

LOW 18

The MSAL library enabled acquisition of security tokens to call protected APIs.

CVSS 3.1LOW 3.9 Local Low privileges User interaction EPSS 0.00189 Published 2024-04-16 Fixed in 4.59.1, 4.60.3 CWE-863

Vulnerabilities

Filters

Microsoft Identity Web Exposes Client Secrets and Certificate Information in Service Logs

MSAL.NET applications targeting Xamarin Android and .NET Android (MAUI) susceptible to local denial of service