Microsoft Azure Cognitive Service for Language Custom Question Answering Elevation of Privilege Vulnerability

A vulnerability allowing elevation of privilege has been identified in the Custom Question Answering feature of Microsoft Azure Cognitive Service for Language. This vulnerability arises from a server-side request forgery (SSRF) weakness, which could potentially be exploited to gain unauthorized privileges.

Impact

Exploitation of this vulnerability could lead to unauthorized elevation of privileges, allowing a user to gain access to resources or functionalities that are normally restricted.