writeups.xyz / FabriXss (CVE-2022-35829): How We Managed to Abuse a Custom Role User Using CSTI and Stored XSS in Azure Fabric Explorer

Submitter : c2a

Date: 19 October 2022

Bounty : undisclosed

Vulnerabilities :

• CSTI
• Stored XSS

Programs :

• Microsoft

Authors :

• Lidor Ben Shitrit

Link :
https://orca.security/resources/blog/fabrixss-vulnerability-azure-fabric-explorer/