CVE-2024-35252: high-severity vulnerability in Microsoft Azure Storage
Azure Storage Movement Client Library Denial of Service Vulnerability
Published · Updated
E-mail alert when it lands in KEV, gets a public PoC or its score goes up.
No sign of exploitation. No public exploitation artifact known so far.
The Azure Storage Movement Client Library contains a flaw that allows an attacker to cause the application to stop responding (denial of service) by sending specially crafted requests. This can disrupt services that rely on this library to move or manage data in Azure Storage.
A denial of service vulnerability in Azure Storage Movement Client Library (CWE-1104) with CVSS 7.5 allows remote attackers to exhaust system resources or trigger an unhandled exception through malformed input or requests, causing service unavailability. The vulnerability requires network connectivity to an affected application but no authentication, making it accessible to unauthenticated threat actors.