pentester.land· Apr 28, 2022· by Shir Tamari (@shirtamari), Ronen Shustin (@ronenshh), Nir Ohfeld (@nirohfeld), Sagi Tzadik (@sagitz_)

Wiz Research discovers "ExtraReplica"— a cross-account database vulnerability in Azure PostgreSQL

Open Original Article ↗
Target Program: Microsoft
🎯 Vulnerability: Web Security Vulnerability
💡 Defense Fix: Implement strict input validation, contextual output encoding, and enforce least-privilege authorization controls.
#Cross-tenant vulnerability#Privilege escalation#Authentication bypass#Cloud