What is GHSA-w47g-6qh7-4qh8?

GHSA-w47g-6qh7-4qh8 is a security advisory published by GitHub Security Advisories with unknown severity. Insertion of sensitive information into sent data in the identity provider user synchronization...

Which CVE IDs does GHSA-w47g-6qh7-4qh8 cover?

GHSA-w47g-6qh7-4qh8 covers the following CVE IDs: CVE-2026-120716. Each CVE has its own detail page on EchelonGraph Pulse with the synthesized EG score.

GHSA-w47g-6qh7-4qh8unknown

Insertion of sensitive information into sent data in the identity provider user synchronization...

Vendor

GitHub Security Advisories

Published

November 3, 2026

Last Modified

November 3, 2026

🔗 CVE IDs covered (1)

CVE-2026-120716 →

📋 Description

Insertion of sensitive information into sent data in the identity provider user synchronization in Devolutions Server 2026.3.13.0 and earlier allows an authenticated user with the delegated permission to update users from the identity provider to obtain other users' MFA secrets via the synchronization API response.

🔗 References (3)

https://nvd.nist.gov/vuln/detail/CVE-2026-120716
https://devolutions.net/security/advisories/DEVO-2026-0039
https://github.com/advisories/GHSA-w47g-6qh7-4qh8