Product:
Azure Compute Gallery
Summary
Server-side request forgery in Azure Compute Gallery allows an authorized attacker to elevate privileges over a network. This vulnerability can lead to significant security risks, including unauthorized access to sensitive data and system resources. It is classified as critical due to its potential impact on confidentiality, integrity, and availability.
Details
| Severity | Base Score | CVE |
|---|---|---|
| CRITICAL | 9.9 | CVE-2025-59503 |
Exploitation
To exploit this vulnerability, an attacker must have authorized access to the Azure Compute Gallery. By crafting specific requests, the attacker can manipulate the server to perform unintended actions, potentially leading to privilege escalation. The low attack complexity means that even users with minimal technical skills could exploit this vulnerability if they have the necessary access.
Affected Products
- Azure Compute Gallery: A service that allows users to manage and share images for virtual machines, which is vulnerable to SSRF attacks.
Mitigation
To mitigate this vulnerability, it is recommended to implement strict access controls and monitor network traffic for unusual requests. Regularly updating and patching the Azure Compute Gallery can also help protect against potential exploits. Users should review their security configurations and ensure that only authorized personnel have access to sensitive resources.