writeups.xyz / When Good APIs Go Bad: Uncovering 3 Azure API Management Vulnerabilities

Submitter : c2a

Date: 4 May 2023

Bounty : undisclosed

Vulnerabilities :

• SSRF
• Unrestricted File Upload
• Path Traversal
• Cloud

Programs :

• Microsoft (Azure)

Authors :

• Liv Matan (@TerminatorLM)

Link :
https://ermetic.com/blog/azure/when-good-apis-go-bad-uncovering-3-azure-api-management-vulnerabilities/