Advisories · Technology
MongoDB Database Tools.
Every CVE that names MongoDB Database Tools among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.
- CVSS 2.1 Low
mongorestore may restore encoded collection names into an unintended collection
- MongoDB Database Tools
- CWE-174
- CVSS 1.0 Low
mongofiles may write outside the working directory through a symlink
- MongoDB Database Tools
- Path traversal
- CVSS 5.9 Medium
mongofiles may disclose GridFS content to standard output through a stored filename
- MongoDB Database Tools
- Path traversal
- CVSS 5.2 Medium
mongorestore may bypass collection guards through a system.buckets prefix
- MongoDB Database Tools
- CWE-706
- CVSS 7.6 High
The DB Tools trust certificates issued by recoverable eMudhra intermediate CAs
- MongoDB Database Tools
- Weak cryptography or TLS