CVE-2025-21384

An authenticated attacker can exploit an Server-Side Request Forgery SSRF vulnerability in Microsoft Azure Health Bot to elevate privileges over a network...

CVE-2025-21384

creationtimestamp| type| source ---|---|--- 2025-04-01 03:48:35+00:00| seen| https://mastodon.social/users/CyberSignaler/statuses/114260660351537233 2025-04-01 03:48:35+00:00| seen| https://mastodon.social/users/CyberSignaler/statuses/114260660351537233 2025-04-01 04:32:08+00:00| seen|...

CVE-2025-21384

An authenticated attacker can exploit an Server-Side Request Forgery SSRF vulnerability in Microsoft Azure Health Bot to elevate privileges over a network...

CVE-2025-21384

CVE-2025-21384 corresponds to an authenticated SSRF (Server-Side Request Forgery) vulnerability in Microsoft Azure Health Bot that can lead to privilege elevation over a network. The advisory notes an authenticated attacker can exploit SSRF to escalate privileges; the CVSS v3.1 base score is 8.8 ...

CVE-2025-21384 Azure Health Bot Elevation of Privilege Vulnerability

...