services / Azure / Web App deployment slot

An Azure App Service deployment slot is a live, addressable instance of a web/function/Logic App hosting application code, configuration (app settings, connection strings), and an assigned managed identity. Slots can be swapped into the production endpoint.

Slots host a single organizational function's production or staging workload; their configuration and managed identity make them a pivot point for code execution and lateral movement.

Microsoft.​Web/​Sites/​slots/​publishxml/​action

Returns the publishing profile XML containing live deployment credentials (FTP/Web Deploy/SCM usernames and passwords, often connection strings), letting an attacker authenticate, deploy arbitrary code, and operate as the app.

Risks

1. Account takeover (CRITICAL)
2. Cryptographic exfiltration (CRITICAL)
3. Lateral movement (BOOST)

Scope: CRITICAL

This privilege may grant access to sensitive data from a significant fraction of organizational functions, allow interruption of critical organizational services, or its exploit could lead to significant privilege escalation.

Links