Gremlin API

A critical vulnerability in Microsoft Azure's Cosmos DB database service, dubbed CosmosEscape, could have allowed attackers to escape the Gremlin query sandbox, execute arbitrary code on shared infras…

Wiz researchers discovered CosmosEscape, a flaw in Azure Cosmos DB's Gremlin API that exposed a platform-wide master key granting read-write access to every Cosmos DB account, including network-isolat…