writeups.xyz / Riding the Azure Service Bus (Relay) into Power Platform

Submitter : c2a

Date: 30 March 2023

Bounty : undisclosed

Vulnerabilities :

• RCE
• Cross-Tenant Vulnerability
• Cloud
• Insecure Deserialization

Programs :

• Microsoft (Azure)

Authors :

• Nick Landers (@Monoxgas)

Link :
https://www.netspi.com/blog/technical/vulnerability-research/azure-service-bus-power-platform/