Description

Detects Azure Function Apps that are configured to allow unrestricted public access without IP address filtering rules. This configuration could allow unauthorized access from any IP address to your Function App endpoints, potentially exposing sensitive functions to security risks.

Detection Strategy

• Checks if the Function App has public network access enabled

• Verifies if there are no IP security restrictions with 'Deny' rules configured

• Reports a vulnerability when public access is enabled AND no deny IP restrictions exist