CVE Vulnerability Catalog

In oclif up to version 4.23.16, an OS command injection vulnerability was found in the JIT Plugin Entry Handler component via the jitPlugins argument. Local access is required. The exploit is public.

XSS vectors in tag-provided inputs in various Regular Labs extensions for Joomla allow tag-provided custom HTML, module content/title overrides and decoded modal or tooltip values to execute unsafe markup. A content author could inject JavaScript that ran in visitors’ browsers.

A vulnerability in Joomla extensions Users Anywhere and Articles Anywhere by regularlabs.com allows restricted user-data exposure. User tags, filters and conditions allowed access to insufficiently restricted user fields. Crafted content could expose authentication-related data, raw user parameters or restricted contact details.

A stored XSS vulnerability in the Regular Labs conditions manager for Joomla allows stored condition values to execute HTML/JavaScript in administrator summaries.

BandiZip v.7.37 is affected by an Authentication Bypass Vulnerability that allows remote attackers to bypass the Mark-of-the-Web protection mechanism.

During query planning in MongoDB, when reading the sort pattern in raw BSONObj form, some places do not explicitly handle the meta expression case. This may lead to incorrect transformations and invariant failure.

An authenticated user can cause the mongod process to be terminated by the OS under memory pressure by performing a specific data type conversion operation in MongoDB's aggregation framework. This requires write access and the ability to run aggregation queries.

An authenticated user can cause the mongod process to be terminated by the OS under memory pressure via the $rankFusion and $scoreFusion aggregation stages. The issue originates in the server's error-handling path and requires the ability to run aggregation queries.

MongoDB is vulnerable to a CPU exhaustion DoS attack. An unauthenticated client can send a specific combination of parameters to the hello command in exhaust mode, causing a response loop that bypasses normal throttling.

An authenticated user with read-only privileges can cause the mongod process to terminate abnormally by issuing a crafted aggregation command, resulting in denial of service for all connected clients until restart. The issue stems from an internal engine selection inconsistency.

An authenticated user with read access can cause the mongod process to be terminated by the OS under memory pressure through certain aggregation expressions that execute server-side JavaScript. The issue involves improper memory handling during document processing.

A MongoDB server initiating an outbound TLS connection may terminate abnormally when processing a malformed OCSP response from a remote peer during the TLS handshake. OCSP stapling validation is enabled by default for outgoing TLS connections.

An authenticated user can cause excessive CPU consumption or out-of-memory on a MongoDB server by sending a crafted Queryable Encryption find payload with an unvalidated field controlling an internal loop. Resource exhaustion degrades availability.

An authenticated user with cursor termination privileges on one database may incorrectly terminate active cursors on another database, disrupting other users' queries. This is due to an authorization check that does not properly scope privileges to the namespace.

When PROXY protocol v2 is used on a Unix domain socket, roles from X.509 client certificates may not be validated against the tlsCATrusts allow-list, leading to unintended role assignments after MONGODB-X509 authentication.

Improper handling of DBPointer objects during BSON serialization in MongoDB's server-side JavaScript engine can leak internal process memory to clients. This affects deployments using server-side JavaScript.

A read-only user can craft an aggregation pipeline using the $linearFill operator with a specific sortBy expression, causing the mongod process to crash (denial of service).

Query operations involving deeply nested $jsonSchema constructs can cause excessive CPU consumption in affected MongoDB deployments, leading to resource exhaustion. The resulting CPU-bound operation cannot be interrupted through standard administrative controls.

An authenticated user with read/write privileges can cause the mongod process to terminate due to an out-of-memory condition by sending a crafted aggregation command. The libmongocrypt library insufficiently validates payload-supplied values, leading to excessive memory allocation.

An authenticated user with write privileges on a Queryable Encryption-enabled collection may modify internal encryption metadata fields intended to be server-controlled by sending crafted write commands through the mongos router on a sharded cluster. This can result in corruption of encrypted query correctness.