CSRF Flaw in Kudu SCM Allowed Code Execution in Azure Services