App Service Abuse

While there are default security features available with App Service (sandboxing/isolation, encrypted communication etc.), vulnerabilities in the code deployed are abusable. he classic web app vulnerabilities like SQL Injection, Insecure file upload, Injection attacks etc. do not disappear magically.

— Insecure File upload

— Server Side Template Injection

— OS Command Injection