Server-side request forgery (ssrf) in Azure Active Directory allows an authorized attacker to elevate privileges over a network.