A new critical remote code execution (RCE) flaw discovered impacting multiple services related to Microsoft Azure could be exploited by a malicious actor to completely take control of a targeted application.
« The vulnerability is achieved through CSRF (cross-site request forgery) on the ubiquitous SCM service Kudu, » Ermetic researcher Liv Matan said in a report shared with The Hacker News. « By

A new critical remote code execution (RCE) flaw discovered impacting multiple services related to Microsoft Azure could be exploited by a malicious actor to completely take control of a targeted application.
« The vulnerability is achieved through CSRF (cross-site request forgery) on the ubiquitous SCM service Kudu, » Ermetic researcher Liv Matan said in a report shared with The Hacker News. « By