Abusing Entra OAuth for fun and access to internal Microsoft applications(research.eye.security)
335 points by the1bernard | 102 comments
Eye Security research post describing how misconfigured Entra OAuth apps could be abused to gain access to internal Microsoft applications.