This category of vulnerabilities allows an attacker to easily acquire administrative level permissions and bypass cloud providers' access controls.
'Confused Deputy' Flaws Persist in Google Cloud, Microsoft Azure
Summary + source link. No paywalls, no tracking.