CVE-2024-21381 Microsoft Azure Active Directory B2C Spoofing Vulnerability

Description

Microsoft Azure Active Directory B2C Spoofing Vulnerability

Affected products and versions

Product	Affected versions	Fixed in
Entra 1.0	1.0.0 → latest	No fix stated

Other CVEs of Entra

The 3 CVEs of Entra →

CVE-2026-83711 Authorization bypass through user-controlled key in Microsoft Azure Active Directory B2C allows an unauthorized attacker… 10.0 Critical CVE-2024-21401 Microsoft Entra Jira Single-Sign-On Plugin Elevation of Privilege Vulnerability 9.8 Critical