Skip to content
OpenAdvisories

Product · MongoDB

Atlas SQL ODBC Driver

3 known vulnerabilities.

1 result · Clear filters · Feed

  • Medium 4.8

    Insufficient OIDC endpoint validation could invoke unintended local protocol handlers

    MongoDB Schema Manager and MongoDB Atlas SQL ODBC Driver do not validate the scheme of the authorization and token endpoints returned by an OIDC issuer's discovery document. A user induced to connect to an uncontrolled MongoDB deployment using MONGODB-OIDC au…