Researchers Discover 3 Vulnerabilities in Microsoft Azure API Management Service

Three new security flaws have been disclosed in Microsoft Azure API Management service that could be abused by malicious actors to gain access to sensitive information or backend services.
This includes two server-side request forgery (SSRF) flaws and one instance of unrestricted file upload functionality in the API Management developer portal, according to Israeli cloud security firm Ermetic.
"

access api api management azure backend developer discover file file upload flaws forgery information instance malicious malicious actors management microsoft microsoft azure request researchers security security flaws sensitive information server server-side request forgery service services ssrf vulnerabilities