services / Google Cloud / Cloud functions

Cloud functions is a serverless computing service. Functions are triggered in response to events and the code runs in an environment fully managed by Google.

cloudfunctions.​functions.​sourceCodeSet

Includes DOS, data manipulation, spend, and hijack risks.

Risks

1. Data manipulation (HIGH)
2. Denial-of-service (HIGH)
3. Resource hijacking (MEDIUM)
4. Spend (MEDIUM)

Scope: CRITICAL

This privilege may grant access to sensitive data from a significant fraction of organizational functions, allow interruption of critical organizational services, or its exploit could lead to significant privilege escalation.

Links