writeups.xyz / Cross-Tenant Information Disclosure: Unraveling Microsoft Connections, Custom Connectors, and OAuth 2.0 in Power Automate

Submitter : c2a

Date: 4 August 2023

Bounty : undisclosed

Vulnerabilities :

• OAuth
• Cross-Tenant Vulnerability

Programs :

• Microsoft

Authors :

• Firas Fatnassi (@Fatnass1F1ras)

Link :
https://fatnassifiras.medium.com/cross-tenant-information-disclosure-unraveling-microsoft-connections-custom-connectors-and-oauth-6487321d28b3