Microsoft Azure AI Document Intelligence Studio Path Traversal Vulnerability Allowing Privilege Escalation

A path traversal vulnerability has been identified in Microsoft Azure AI Document Intelligence Studio. This issue allows an unauthorized attacker to bypass authentication and authorization, accessing files located one directory above the intended file upload path. As a result, the attacker could potentially elevate privileges by downloading content from the parent folder of the mounted path.

Impact

Exploitation of this vulnerability could lead to unauthorized access of files, allowing an attacker to download sensitive content and potentially escalate privileges within the application.

Remediation

Users can update to the latest version of Azure AI Document Intelligence Studio to address this vulnerability. The update will not affect user data or settings.