Revisiting the Azure Kudu XSS: what Microsoft saidTen years on, the email thread behind the Azure Kudu XSS is more interesting than the bug. A look at the disclosure, why MSRC kept rejecting it, and why they were wrong.
Responsible disclosure shouldn't be this hardI found open cloud buckets with 10,000+ PII documents and spent months trying to get someone, anyone, to act. It took going to NRK before the data was finally secured.