Microsoft Azure Custom Locations Resource Provider Server-Side Request Forgery Privilege Escalation Vulnerability

A server-side request forgery (SSRF) vulnerability has been identified in the Azure Custom Locations Resource Provider. This vulnerability allows an authorized attacker to elevate privileges over a network. The issue arises from the way the resource provider handles network requests, potentially allowing attackers to manipulate server-side requests and gain unauthorized access or privileges.

Impact

Exploitation of this vulnerability could lead to unauthorized privilege escalation within the affected Azure environment.