CyberRota Analysis
AI-GeneratedThe vulnerability allows OAuth2 sign-in to reactivate administrator-deactivated accounts on authentication sources that do not utilize refresh tokens, potentially leading to unauthorized access. This issue stems from an incomplete fix of a previous vulnerability, which could compromise account security and integrity. Organizations using affected authentication systems should prioritize addressing this vulnerability to prevent unauthorized account access.
Public Exploit Signal
A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.
Note: these links are listed for security research and verification purposes only.
Original NVD Description
OAuth2 sign-in reactivates an administrator-deactivated account on auth sources without refresh tokens (incomplete fix of #38009)