writeups.xyz / ChaosDB Explained: Azure's Cosmos DB Vulnerability Walkthrough

Submitter : c2a

Date: 10 November 2021

Bounty : 40,000

Vulnerabilities :

• Cross-Tenant Vulnerability
• Account Takeover
• Privilege Escalation

Programs :

• Microsoft

Authors :

• Nir Ohfeld (@Nirohfeld)
• Sagi Tzadik (@Sagitz_)

Link :
https://www.wiz.io/blog/chaosdb-explained-azures-cosmos-db-vulnerability-walkthrough