New Microsoft Azure Vulnerability Uncovered — Experts Warn of RCE Attacks

A new critical remote code execution (RCE) flaw discovered impacting multiple services related to Microsoft Azure could be exploited by a malicious actor to completely take control of a targeted application.
"The vulnerability is achieved through CSRF (cross-site request forgery) on the ubiquitous SCM service Kudu," Ermetic researcher Liv Matan said in a report shared with The Hacker News. "By

actor application attacks azure code code execution control critical cross-site cross-site request forgery csrf ermetic experts exploited flaw forgery hacker malicious microsoft microsoft azure rce remote code remote code execution report request researcher scm service services vulnerability