Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-gf3f-xg7m-h8wp

Опубликовано: 10 сент. 2026
Источник: github
Github: Не прошло ревью
CVSS4: 6.1
CVSS3: 8.1

Описание

Improper neutralization of special elements in data query logic in the GridFS component of the MongoDB Go Driver can cause a caller-supplied structured file identifier to be interpreted as a query condition rather than as a literal identifier. An authenticated user who can influence the identifier passed by an affected application may cause all GridFS file chunks in the affected bucket to be removed, rendering stored file content unreadable.

Improper neutralization of special elements in data query logic in the GridFS component of the MongoDB Go Driver can cause a caller-supplied structured file identifier to be interpreted as a query condition rather than as a literal identifier. An authenticated user who can influence the identifier passed by an affected application may cause all GridFS file chunks in the affected bucket to be removed, rendering stored file content unreadable.

EPSS

Процентиль: 18%
0.00261
Низкий

6.1 Medium

CVSS4

8.1 High

CVSS3

Дефекты

CWE-943

Связанные уязвимости

CVSS3: 8.1
ubuntu
2 дня назад

Improper neutralization of special elements in data query logic in the GridFS component of the MongoDB Go Driver can cause a caller-supplied structured file identifier to be interpreted as a query condition rather than as a literal identifier. An authenticated user who can influence the identifier passed by an affected application may cause all GridFS file chunks in the affected bucket to be removed, rendering stored file content unreadable.

CVSS3: 8.1
redhat
5 дней назад

Improper neutralization of special elements in data query logic in the GridFS component of the MongoDB Go Driver can cause a caller-supplied structured file identifier to be interpreted as a query condition rather than as a literal identifier. An authenticated user who can influence the identifier passed by an affected application may cause all GridFS file chunks in the affected bucket to be removed, rendering stored file content unreadable.

CVSS3: 8.1
nvd
5 дней назад

Improper neutralization of special elements in data query logic in the GridFS component of the MongoDB Go Driver can cause a caller-supplied structured file identifier to be interpreted as a query condition rather than as a literal identifier. An authenticated user who can influence the identifier passed by an affected application may cause all GridFS file chunks in the affected bucket to be removed, rendering stored file content unreadable.

CVSS3: 8.1
debian
5 дней назад

Improper neutralization of special elements in data query logic in the ...

EPSS

Процентиль: 18%
0.00261
Низкий

6.1 Medium

CVSS4

8.1 High

CVSS3

Дефекты

CWE-943