pentester.land· Apr 26, 2024· by Arnau Ortega

Arbitrary 1-click Azure tenant takeover via MS application

Open Original Article ↗
Target Program: Microsoft (Azure)
🎯 Vulnerability: Web Security Vulnerability
💡 Defense Fix: Implement strict input validation, contextual output encoding, and enforce least-privilege authorization controls.
#Cloud#Privilege escalation#Cross-tenant vulnerability#Phishing