CVE-2021-20329 Specific cstrings input may not be properly validated in the Go Driver

Specific cstrings input may not be properly validated in the MongoDB Go Driver when marshalling Go objects into BSON. A malicious user could use a Go object with specific string to potentially inject additional fields into marshalled documents. This issue affects all MongoDB GO Drivers prior to a...

CVE-2021-20329

CVE-2021-20329 affects the MongoDB Go Driver prior to 1.5.0. Specific crafted strings in Go objects marshalled to BSON may inject extra fields into documents due to improper validation, exposing potential data integrity risks. The issue is documented in the GitHub advisory (GHSA-F6MQ-5M25-4R72) a...

CVE-2021-20329

Specific cstrings input may not be properly validated in the MongoDB Go Driver when marshalling Go objects into BSON. A malicious user could use a Go object with specific string to potentially inject additional fields into marshalled documents. This issue affects all MongoDB GO Drivers prior to a...

Improper Input Validation

Specific cstrings input may not be properly validated in the MongoDB Go Driver when marshalling Go objects into BSON. A malicious user could use a Go object with specific string to potentially inject additional fields into marshalled documents...

CVE-2021-20329: Improper Validation of Specified Type of Input

Specific cstrings input may not be properly validated in the MongoDB Go Driver when marshalling Go objects into BSON. A malicious user could use a Go object with specific string to potentially inject additional fields into marshalled documents. This issue affects all MongoDB GO Drivers prior to a...

Specific cstrings input may not be properly validated in the Go Driver

Specific cstrings input may not be properly validated in the MongoDB Go Driver when marshalling Go objects into BSON. A malicious user could use a Go object with specific string to potentially inject additional fields into marshalled documents. This issue affects all MongoDB GO Drivers up to and...

MongoDB 输入验证错误漏洞

Mongodb Server is the United States Mongodb company's set of open source NoSQL database . The database provides collection-oriented storage , dynamic query , data replication and automatic failover and other functions . An input validation error vulnerability exists in MongoDB mongo-go-driver,...

Denial Of Service (DoS)

github.com/mongodb/mongo-go-driver is vulnerable to denial of serviceDoS attacks. The library does not properly validate the length of BSON value in the ReadLength and ReadElement functions in bsoncore.go, leading to an integer overflow and an application crash...