services / Azure / Web App hostname bindings

A hostname binding maps a custom domain (and its SSL/SNI configuration) to an Azure App Service web app, controlling how public inbound traffic is routed to the site.

Governs public-facing reachability and domain-to-app routing for a single application function.

Microsoft.​Web/​Sites/​hostnamebindings/​write

Creating/updating a hostname binding lets an attacker attach or repoint a custom domain to an app, controlling traffic routing on that domain (takeover) and serving attacker-controlled content on the public-facing asset.

Risks

1. Domain takeover (CRITICAL)
2. Defacement (HIGH)

Scope: HIGH

This privilege may grant access to sensitive data from a single organizational function, or allow interruption of a service supporting a single organizational function.

Links