https://t0xodile.github.io/posts/Account-Takeover-in-Azure's-API-Management-Developer-Portal/
Account takeover vulnerability in Azure’s API Management Developer Portal - t0xodile's blog