Exploiting SQL Server Date Correlation Optimization: How Tampered Backups Enable Cross-Database Data Leaks

This article details a vulnerability allowing malicious logic to be carried across database boundaries through SQL Server’s Date Correlation Optimization (DCO) mechanism. A follow-up to a previous vulnerability affecting DBaaS offerings, this exploit demonstrates how corrupted metadata can be exploited to leak sensitive data.