Threats tagged 'ghsa-jhg3-8vrj-4c5q'

An authorization weakness in MongoDB Server's aggregation framework allows an authenticated user with basic database privileges to read data from collections they should not have access to. This occurs because privilege checks during view definition validation do not cover nested pipeline portions, leading to unintended data exposure including sensitive authentication material.