Skip to content
OpenAdvisories

Package · Ubuntu

mongo-java-driver

4 known vulnerabilities.

1 result · Clear filters · Feed

  • High 8.3

    GridFS data disclosure and deletion via query-operator injection in file IDs in the MongoDB Java Driver

    Improper neutralization of special elements in data query logic in the GridFS component of the MongoDB Java Driver can cause a caller-supplied structured file identifier to be interpreted as a query condition rather than as a literal identifier. An authentica…