Cloud Instance Metadata Service News Today

Two of the vulnerabilities — in Azure Functions and Azure Digital Twins — required no account authentication for an attacker to exploit them.

Two of the vulnerabilities — in Azure Functions and Azure Digital Twins — required no account authentication for an attacker to exploit them.

Orca security researchers have shared details on four SSRF vulnerabilities in Azure services, including two that could be exploited without authentication.