Skip to content
OpenAdvisories
High MSRC-CVE-2025-30387 1 CVE

Document Intelligence Studio On-Prem Elevation of Privilege Vulnerability

Published May 13, 2025 · Updated May 13, 2025

Vendor: Microsoft

Summary

Impact: Elevation of Privilege. Microsoft rating: Important. Not known to be exploited — Exploitation Unlikely. Customer action: Required.

Details

What actions does a valid user have to take to be protected against this vulnerability?
Update the image to the latest tag. User data and setting will not be affected by upgrading to the latest tag.

How could an attacker exploit this vulnerability?
An attacker could exploit this vulnerability by bypassing authentication/authorization to access files located one directory above the intended file upload path.

What privileges could be gained by an attacker who successfully exploited the vulnerability?
An attacker who successfully exploited this vulnerability could potentially download the content of parent folder of the mounted path.

Security updates
1.0.03019.1-official-7241c17a — https://learn.microsoft.com/en-us/azure/ai-services/document-intelligence/whats-new?view=doc-intel-4.0.0

Vulnerabilities 1

  • Critical 9.8
    CVE-2025-30387

    Document Intelligence Studio On-Prem Elevation of Privilege Vulnerability

    Improper limitation of a pathname to a restricted directory ('path traversal') in Azure allows an unauthorized attacker to elevate privileges over a network.

    Microsoft Azure AI Document Intelligence Studio

Revision history

  1. #1

    Information published.

References