Skip to content
CVE PROGRAM SOURCE RECORD4.2 Medium

CVE-2019-2391

JS-bson may incorrectly serialise some requests

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
mongodb

Description

Incorrect parsing of certain JSON input may result in js-bson not correctly serializing BSON. This may cause unexpected application behaviour including data disclosure. This issue affects: MongoDB Inc. js-bson library version 1.1.3 and prior to.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

MongoDB Inc. js-bson

Default version status: unaffected

  • 1.0 to ≤ 1.1.3affected

References