جزئیات آسیب‌پذیری

Mongoose is a MongoDB object modeling tool designed to work in an asynchronous environment. Prior to 6.13.11, 7.8.12, 8.24.3, and 9.9.2, Mongoose countDocuments() does not apply the configured sanitizeFilter query selector injection defense. An application that enables sanitizeFilter and passes attacker-controlled filter values to countDocuments() can therefore process query operator objects as operators rather than literal values, causing the count to include documents that should not match and potentially undermining authorization or application logic based on that count. This issue is fixed in versions 6.13.11, 7.8.12, 8.24.3, and 9.9.2.

• https://github.com/Automattic/mongoose/security/advisories/GHSA-pcrw-h46h-c93h x_refsource_CONFIRM
• https://github.com/Automattic/mongoose/commit/7e912af3fac52cb0eea4cd71e24d65318916831a x_refsource_MISC
• https://github.com/Automattic/mongoose/commit/8b10d5760bb181f5bf5d01495cde161c8aed0557 x_refsource_MISC
• https://github.com/Automattic/mongoose/commit/b1df045aab076b740fdaec14a15a44c694b85b7d x_refsource_MISC
• https://github.com/Automattic/mongoose/commit/b5003d3915db1cf9209c38a4b93cf3a92cddd710 x_refsource_MISC
• https://github.com/Automattic/mongoose/releases/tag/6.13.11 x_refsource_MISC
• https://github.com/Automattic/mongoose/releases/tag/7.8.12 x_refsource_MISC
• https://github.com/Automattic/mongoose/releases/tag/8.24.3 x_refsource_MISC
• https://github.com/Automattic/mongoose/releases/tag/9.9.2 x_refsource_MISC