Insufficiently protected credentials in Microsoft Authentication Library (MSAL) for Node.js allows an unauthorized attacker to disclose information over a network.
Severity
Important
CVSS base score
Not published
Impact
Information Disclosure
Exploitation detected
No known exploitation (MSRC assessment)
Exploitability
Exploitation Less Likely
Publicly disclosed
No (MSRC assessment)
EPSS · 30-day forecast
No EPSS score collected
Customer action
Required: follow the MSRC remediation guidance
More details
Public detection template
No Nuclei template is listed in the current collected catalog
Component
Microsoft Authentication Library (MSAL) for Node.js