MongoDB Compass vulnerabilities
3 known vulnerabilities in MongoDB Compass from MongoDB. 3 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.
Latest first
- 7.8 High severity
MongoDB Compass: Improper Neutralization of Special Elements used in an OS Command
When importing connections in Compass it is possible to override some connection options that are otherwise can't be changed via connection form. In particular it is possible to provide a custom browser open command for OIDC auth flow that is usually can be se
- 7.8 High severity
MongoDB Compass: Untrusted Search Path
MongoDB Compass may be susceptible to local privilege escalation under certain conditions potentially enabling unauthorized actions on a user's system with elevated privileges, when a crafted file is stored in C:\node_modules\. This issue affects MongoDB Compa
- 9.8 Critical severity
MongoDB Compass: Improper Control of Generation of Code
MongoDB Compass may be susceptible to code injection due to insufficient sandbox protection settings with the usage of ejson shell parser in Compass' connection handling. This issue affects MongoDB Compass versions prior to version 1.42.2