EUVD-2024-27991

Malicious code in bioql PyPI...

The vulnerability of the Azure Migrate data transfer service allows a perpetrator to carry out a cross-site scripting attack.

The vulnerability of the Azure Migrate data transfer service is related to the lack of security measures for website structure protection. Exploiting this vulnerability could allow a malicious actor to perform a cross-site scripting attack remotely...

Vulnerability fixed in Microsoft Azure

Microsoft has fixed a vulnerability in Azure Migrate. A malicious party could exploit the vulnerability to launch a Cross-Site Scripting attack. Such an attack can lead to execution of arbitrary code in the browser of the victim, or access sensitive data in the context of the victim's browser of...

CVE-2024-30053

Azure Migrate Cross-Site Scripting Vulnerability...

CVE-2024-30053

Azure Migrate Cross-Site Scripting Vulnerability...

CVE-2024-30053 Azure Migrate Cross-Site Scripting Vulnerability

...

CVE-2024-30053

CVE-2024-30053 refers to a Cross-Site Scripting vulnerability in Microsoft Azure Migrate. The Azure Migrate product is affected; Microsoft has released updates to fix the issue (MSRC advisory page cited). Public risk details indicate a Medium severity (CVSS v3.1 base score around 6.5; B: 6.5) wit...

KLA67390 XSS vulnerability in Microsoft Azure

XSS vulnerability was found in Microsoft Azure. Malicious users can exploit this vulnerability to perform cross-site scripting attack. Original advisories CVE-2024-30053 Related products Microsoft-Azure CVE list CVE-2024-30053 high Solution Install necessary updates from the KB section, that are...

PT-2024-2807 · Microsoft · Azure Migrate

Name of the Vulnerable Software and Affected Versions: Azure Migrate affected versions not specified Description: The issue is related to improper authorization in the Azure Migrate service for transferring data from a local environment. Exploitation of this issue may allow a remote attacker to...

Malicious code in azure-arm-migrate-samples-js (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware a0413908e2054a3f69cfed474b521ca739fca9c9e1df03da8ddea0d78999bfeb Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

KLA12348 OSI vulnerability in Microsoft Azure

An information disclosure vulnerability was found in Microsoft Azure. Malicious users can exploit this vulnerability to obtain sensitive information. Original advisories CVE-2021-42306 Related products Microsoft-Active-Directory Microsoft-Azure CVE list CVE-2021-42306 unknown Solution Install...