Microsoft Azure Services Flaws Could've Exposed Cloud Resources to Unauthorized Access

Four different Microsoft Azure services have been found vulnerable to server-side request forgery (SSRF) attacks that could be exploited to gain unauthorized access to cloud resources.
The security issues, which were discovered by Orca between October 8, 2022 and December 2, 2022 in Azure API Management, Azure Functions, Azure Machine Learning, and Azure Digital Twins, have since been addressed

access api api management attacks azure cloud cloud resources december digital digital twins exploited exposed flaws forgery functions machine machine learning management microsoft microsoft azure microsoft azure services october orca request resources security security issues server server-side request forgery services ssrf unauthorized access vulnerable