Lucene search
+L

44 matches found

CNNVD
CNNVD
•added 2025/02/27 12:00 a.m.•12 views

MongoDB Shell 安全漏洞

MongoDB Shell mongosh is an interactive database manipulation tool from the American company MongoDB. It is used to interact with the MongoDB database, execute commands and manipulate data. A security vulnerability exists in MongoDB Shell versions prior to 2.3.9 that stems from control character...

8.8CVSS7.5AI score0.00278EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2025/02/27 12:00 a.m.•15 views

PT-2025-8937

Name of the Vulnerable Software and Affected Versions mongosh versions prior to 2.3.9 Description The MongoDB Shell may be susceptible to control character injection where an attacker with control of the mongosh autocomplete feature can use the autocompletion feature to input and run obfuscated...

7.6CVSS6.8AI score0.00356EPSS
SaveExploits0References11
CNNVD
CNNVD
•added 2025/02/27 12:00 a.m.•15 views

MongoDB Shell 注入漏洞

MongoDB Shell mongosh is an interactive database manipulation tool from the American company MongoDB. It is used to interact with the MongoDB database, execute commands and manipulate data. A security vulnerability exists in MongoDB Shell versions prior to 2.3.9 that stems from control character...

7.6CVSS7.5AI score0.00356EPSS
SaveExploits0References2
Packet Storm
Packet Storm
•added 2024/03/08 12:00 a.m.•503 views

MongoDB 2.0.1 / 2.1.1 / 2.1.4 / 2.1.5 Local Password Disclosure

Title: MongoDB MONGOSH Password Exposure Vulnerability Product: MongoDB database Tool: mongosh Affected Versions: 2.0.1 , 2.1.1,2.1.4,2.1.5 Tested Versions: 2.0.1 , 2.1.1,2.1.4,2.1.5 Risk Level: Low Author of Advisory: Emad Al-Mousa Vulnerability Details: Vulnerability in MongoDB database system...

7.4AI score
SaveExploits0
Rows per page
Query Builder