services / Azure / Storage Blob Service Blobs

Blobs are the individual data objects (files) stored inside containers of an Azure Storage account's blob service. They hold an organization's unstructured production data such as documents, backups, media, and application data.

Data-plane access to blobs directly exposes stored organizational data; ADLS Gen2 (hierarchical namespace) accounts also expose POSIX ownership/ACLs at the blob level.

Microsoft.​Storage/​storageAccounts/​blobServices/​containers/​blobs/​add/​action

Appends content to an append blob (e.g., logs) without needing to overwrite the whole object. Lets an attacker inject attacker-controlled content into append-only data such as audit or application logs; lower severity than overwriting a blob outright since existing content is not replaced.

Risks

1. Data manipulation (HIGH)

Scope: MEDIUM

This privilege may grant access to confidential data, or its exploit can incur operational cost.

Links