Description
All versions of marsdb are vulnerable to Command Injection. In the DocumentMatcher class, selectors on $where clauses are passed to a Function constructor unsanitized. This allows attackers to run arbitrary commands in the system when the function is executed.
Recommendation
No fix is available yet. Followings are affected versions:
- >= 0.0.0
References
Could your website be exposed too?
SmartScanner can check your website for Command Injection in marsdb and gives you actionable findings to investigate.
Start a free scanRelated Issues
- Command Injection in ascii-art - Vulnerability
- chromedriver Command Injection vulnerability - CVE-2023-26156
- automagik-genie has a command injection vulnerability - CVE-2026-30635
- Saltcorn's Reflected XSS and Command Injection vulnerabilities can be chained for 1-click-RCE - Vulnerability
You might also like:
See something that needs correcting? Let us knowUpdated January 09, 2023