GCVE-VVD-CLOUD-2020-0029

Advisory Published

Vulnetix · Advisory published January 30, 2020

A Vulnerability in App Service could allow an unprivileged function run by the user to execute code in the context of NT AUTHORITY\system, thereby escaping the sandbox. This vulnerability allowed cross-account access when using the Free/Shared tier.

Download JSON Open in Console

Affected Products

Vendor	Product	Versions	Platforms
Azure	Cloud Services	—	—
Azure	App Service	—	—

Aliases

CVE-2019-1372

Transitive aliases

GHSA-649f-8c3w-9g8g BDU:2019-03863 EUVD-2019-9929

References

Azure App Service RCE

advisory

Browse GCVE Records

100 records in the GCVE database · Updated April 16, 2026

No matching records found.

Explore Further

Investigate this vulnerability in the interactive console or download the raw GCVE record.

Open in Console Download JSON