Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-ghvc-23m5-5q74

Опубликовано: 22 июл. 2026
Источник: github
Github: Не прошло ревью
CVSS4: 8.6
CVSS3: 8.1

Описание

An authenticated user with low privileges may be able to perform unauthorized reads and writes on data protected by role-based query-level access controls, due to insufficient validation of certain client-supplied command parameters. The issue affects find, update, delete, and aggregate commands in non-apiStrict configurations.

An authenticated user with low privileges may be able to perform unauthorized reads and writes on data protected by role-based query-level access controls, due to insufficient validation of certain client-supplied command parameters. The issue affects find, update, delete, and aggregate commands in non-apiStrict configurations.

EPSS

Процентиль: 31%
0.00384
Низкий

8.6 High

CVSS4

8.1 High

CVSS3

Дефекты

CWE-807

Связанные уязвимости

CVSS3: 8.1
ubuntu
около 1 месяца назад

An authenticated user with low privileges may be able to perform unauthorized reads and writes on data protected by role-based query-level access controls, due to insufficient validation of certain client-supplied command parameters. The issue affects find, update, delete, and aggregate commands in non-apiStrict configurations.

CVSS3: 8.1
nvd
около 1 месяца назад

An authenticated user with low privileges may be able to perform unauthorized reads and writes on data protected by role-based query-level access controls, due to insufficient validation of certain client-supplied command parameters. The issue affects find, update, delete, and aggregate commands in non-apiStrict configurations.

CVSS3: 8.1
debian
около 1 месяца назад

An authenticated user with low privileges may be able to perform unaut ...

EPSS

Процентиль: 31%
0.00384
Низкий

8.6 High

CVSS4

8.1 High

CVSS3

Дефекты

CWE-807