Experts Uncover How Cybercriminals Could Exploit Microsoft Entra ID for Elevated Privilege

Cybersecurity researchers have discovered a case of privilege escalation associated with a Microsoft Entra ID (formerly Azure Active Directory) application by taking advantage of an abandoned reply URL.
"An attacker could leverage this abandoned URL to redirect authorization codes to themselves, exchanging the ill-gotten authorization codes for access tokens," Secureworks Counter Threat Unit (

access active directory application authorization azure azure active directory case cybercriminals cybersecurity directory entra entra id escalation experts exploit microsoft microsoft entra microsoft entra id privilege privilege escalation redirect researchers uncover url