CVE-2024-35255 vulnerability

[rhodh]

Description:
We are using the Docker image mcr.microsoft.com/azure-functions/dotnet-isolated:4-dotnet-isolated8.0. This image includes Microsoft.Identity.Client version 4.60.3.0, which is affected by CVE-2024-35255. Please update Microsoft.Identity.Client to a version that addresses this vulnerability.

Steps to Reproduce:

1. Use mcr.microsoft.com/azure-functions/dotnet-isolated:4-dotnet-isolated8.0 in a Dockerfile.
2. Run a vulnerability scan (I'm using Grype).

Expected Behavior:
No critical vulnerabilities should be present.

Actual Behavior:
CVE-2024-35255 is detected due to Microsoft.Identity.Client version 4.60.3.0.

Additional Context:
Confirm version 4.60.3.0 of Microsoft.Identity.Client in the Docker image.

[pkpaul5]

We are also facing this issue. Please let us know when this issue will be addressed