| ▲ | sakisv 3 hours ago | |
Is it me or was there a similar vulnerability reported a few years ago? Something about the attacker getting access to all platform's users' databases, though not sure if it was cosmos or something similar. | ||
| ▲ | FromOmelas 27 minutes ago | parent | next [-] | |
Yes. you're thinking of https://www.wiz.io/blog/chaosdb-explained-azures-cosmos-db-v... | ||
| ▲ | ultra2d 3 hours ago | parent | prev | next [-] | |
This one from a year ago? https://dirkjanm.io/obtaining-global-admin-in-every-entra-id... "This vulnerability could have allowed me to compromise every Entra ID tenant in the world (except probably those in national cloud deployments)." | ||
| ▲ | chatmasta an hour ago | parent | prev [-] | |
There have been a lot. I remember one that was essentially “send the request without an Authorization header.” | ||