Improper neutralization of special elements in output used by a downstream component ('injection') in Azure Storage Library allows an authorized attacker to elevate privileges over a network.
How could an attacker exploit this vulnerability? An authenticated attacker who can supply a blob tag condition to an application using the affected library could submit a specially crafted value. Successful exploitation could allow the attacker to delete recovery snapshots or blobs beyond the operation authorized by the application. User interaction is not required. What privileges could be gained by an attacker who successfully exploited this vulnerability? An attacker could add unauthorized deletion options to a permitted storage operation, allowing recovery snapshots or blobs to be deleted when the application did not intend to authorize that action.
<a href="https://imap143.com/">Myungyong Lee</a>