Applications connected to Azure through its API Connections functionality could have leaked data to unauthenticated or low-privileged users prior to Microsoft fixing the issue earlier this year, ...

The vulnerabilities comprise url formatting bypasses and an unrestricted file upload functionality in the API Management developer portal, according to cybersecurity firm Ermetic. Microsoft has ...