writeups.xyz / Arbitrary 1-click Azure tenant takeover via MS application

Submitter : c2a

Date: 26 April 2024

Bounty : undisclosed

Vulnerabilities :

• Cloud
• Privilege Escalation
• Cross-Tenant Vulnerability
• Phishing

Programs :

• Microsoft (Azure)

Authors :

• Arnau Ortega

Link :
https://falconforce.nl/arbitrary-1-click-azure-tenant-takeover-via-ms-application/