XSS Vulnerabilities in Azure Services Let Attackers Execute Malicious Scripts

Two severe vulnerabilities in Azure services, Azure Bastion and Azure Container Registry—that allow Cross-Site Scripting (XSS) by leveraging a flaw in the postMessage iframe have been discovered. Cross-site scripting (XSS) is malicious scripts being unintentionally executed by users’ browsers after being injected by a threat actor into a reliable website. Threat actors may acquire unauthorized […]

The post XSS Vulnerabilities in Azure Services Let Attackers Execute Malicious Scripts appeared first on Cyber Security News.

actor attackers azure azure container registry bastion browsers container cross-site cyber security flaw iframe malicious registry scripting scripts services threat threat actor vulnerabilities vulnerability website xss