Skip to content
OpenAdvisories

Product · MongoDB

MongoDB PHP Library

1 known vulnerabilities.

1 result · Clear filters · Feed

  • High 8.3

    GridFS data disclosure and deletion via query-operator injection in file IDs in the MongoDB PHP Library

    Improper neutralization of special elements in data query logic in the GridFS component of the MongoDB PHP Library can cause a caller-supplied structured file identifier to be interpreted as a query condition rather than as a literal identifier. An authentica…