: A VM makes an HTTP request to the metadata service endpoint to request an OAuth2 token. The request typically includes parameters like the resource (or audience) for which the token is being requested.
Executive Summary * In total we found four Azure services vulnerable to SSRF: Azure API Management, Azure Functions, Azure Machine... Orca Security : A VM makes an HTTP request to