Description
All versions of marsdb are vulnerable to Command Injection. In the DocumentMatcher class, selectors on $where clauses are passed to a Function constructor unsanitized. This allows attackers to run arbitrary commands in the system when the function is executed.
Recommendation
No fix is available yet. Followings are affected versions:
- >= 0.0.0
References
Related Issues
- Prototype pollution in 101 - CVE-2021-25943
- Use-After-Free in puppeteer - CVE-2019-5786
- Open Redirect in node-forge - CVE-2022-0122
- Denial of service in three - CVE-2020-28496
- Tags:
- npm
- marsdb
Anything's wrong? Let us know Last updated on January 09, 2023