---
id: 8154
title: "XSS Using Active Directory Automatic Provisioning"
source_domain: netspi.com
source_url: "https://www.netspi.com/blog/technical-blog/web-application-pentesting/xss-using-active-directory-automatic-provisioning/"
published_at: "2017-08-17T00:00:00Z"
tags: ["cloud", "xss", "output-encoding", "azure-ad", "scim", "identity-management"]
phying_url: "https://phying.com/item/8154"
lang: en
---

# XSS Using Active Directory Automatic Provisioning

## Summary

Azure AD SCIM provisioning synced user names into a web app without output encoding, giving script injection via the firstName field and a path to steal credentials with an imported JS file.

## Intelligence Metadata

- **Sources:** netspi.com
- **Published:** 2017-08-17T00:00:00Z
- **Original:** https://www.netspi.com/blog/technical-blog/web-application-pentesting/xss-using-active-directory-automatic-provisioning/
- **Phying News:** https://phying.com/item/8154