👩‍💻 CosmosEscape: Taking Over Every Azure Cosmos DB

Wiz Research found CosmosEscape, a critical vulnerability in Azure Cosmos DB's Gremlin API enabling sandbox escape via .NET reflection. Attackers could obtain a platform-wide Cosmos Master Key granting full read/write access to any customer database and enumeration of all accounts.

https://www.wiz.io/blog/cosmosescape-taking-over-every-database-in-azure-cosmos-db

#azure