Write-ups
Check The Published Writeups
| WDB | Title | Tags | Programs | Authors | Type | Publication | Added |
|---|---|---|---|---|---|---|---|
| 1646 | MSRC – Joint security research write up – Azure AD Consent bypass disclosure with Kim Jamia – Q1/2022 | Authorization flaw | Microsoft | Joosua Santasalo (@SantasaloJoosua) | Bug Bounty | 2022-04-09 | 2023-06-13 |
| 1607 | Gaining Unlimited access to graph AuditLogs endpoint using complex filters with non-privileged user account | Information disclosure Privilege escalation | Microsoft | Joosua Santasalo (@SantasaloJoosua) | Bug Bounty | 2022-04-21 | 2023-06-13 |
| 1595 | Azure Monitor – Malicious KQL Query | Privilege escalation Cloud | Microsoft | Joosua Santasalo (@SantasaloJoosua) | Bug Bounty | 2022-04-27 | 2023-06-13 |