Lucene search

K
veracodeVeracode Vulnerability DatabaseVERACODE:22163
HistoryDec 12, 2019 - 5:26 a.m.

Authorization Bypass

2019-12-1205:26:17
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
7

0.001 Low

EPSS

Percentile

45.3%

bson-objectid is vulnerable to authorization bypass. The vulnerability exists as it was possible to generate a malformed objectid through ObjectID() by inserting an additional property in the user-input.

CPENameOperatorVersion
bson-objectidle1.2.5

0.001 Low

EPSS

Percentile

45.3%

Related for VERACODE:22163