VDB

GCVE-110-CLOUD-2024-0004

GCVE-110-CLOUD-2024-0004
Advisory Published
Vulnetix · Advisory published December 11, 2024
A vulnerability in Azure API Management Developer Portal allows arbitrary code execution and secret exfiltration. The issue stems from a workflow that loads untrusted data from opened issues, potentially allowing attackers to inject malicious commands. This could lead to code execution in the runner, granting access to sensitive tokens and permissions.
Download JSON Open in Console

Affected Products

VendorProductVersionsPlatforms
AzureAPI Management Developer Portal——
AzureAPI Management——
AzureCloud Services——

References

Code Execution in Azure API Management Developer Portal
advisory
advisory

Browse GCVE Records

72,921 records in the GCVE database · Updated July 15, 2026

No matching records found.

Explore Further

Investigate this vulnerability in the interactive console or download the raw GCVE record.

Open in Console Download JSON
$ Console Community · 100/wk Open console ›