← Database
CVE-2025-30392
CRITICAL
CVSS: 9.8
Published: 2025-04-30
Modified: 2026-06-17
Description
Improper authorization in Azure Bot Framework SDK allows an unauthorized attacker to elevate privileges over a network.
Affected Platforms
Microsoft Azure Ai Bot Service
Weakness Type
CWE-285, NVD-CWE-Other