Threats tagged 'ghsa-px68-pqg4-8q7x'

MongoDB Database Tools mongorestore has a vulnerability where it incorrectly URL-decodes an original collection name from metadata if the dump filename is truncated. This can allow a database user with the ability to create and populate a specially encoded collection to cause a restore operation to write documents into a different collection that the user cannot directly modify. This may lead to omission of backed-up documents or unintended replacement of collections when using the --drop option. The issue affects versions from 100.0.2 up to but not including 100.20.1.