[Contribution] UnOAuthorized

[korniko98]

Summary (give a brief description of the issue)

"[It was discovered that an attacker could] perform actions in Entra ID beyond expected authorization controls, based on analysis of the OAuth 2.0 scope (permissions). Our most concerning discovery involved the ability to add and remove users from privileged roles, including the most powerful role in Entra ID: Global Administrator."

References (provide links to blogposts, etc.)

https://www.semperis.com/blog/unoauthorized-privilege-elevation-through-microsoft-applications/