Azure’s XSS Vulnerabilities Expose User Sessions to Unauthorized Access
Cloud Security XSS Vulnerabilities in Azure Led to Unauthorized Access to User Sessions Introduction In a recent report, cloud security firm Orca identified and Microsoft resolved two cross-site scripting (XSS) vulnerabilities in Azure Bastion and Azure Container Registry (ACR) that could have led to unauthorized access to user sessions, data tampering, and service disruptions. The…