CWE-943: NoSQL Injection, NoSQLi
The product generates a query intended to access or manipulate data in a data store such as a database, but it does not neutralize or incorrectly neutralizes special elements that can modify the intended logic of the query.
Also known as Improper Neutralization of Special Elements in Data Query Logic.
A kind of CWE-74 Injection.
From the CWE List. © The MITRE Corporation.
Newest
- openbmb internet of agents OpenBMB Internet of Agents Agent Registry milvus_utils.py _primary_field_query data query logic injection 6.9 Medium
- chartbrew Chartbrew: Blind NoSQL injection via date variable in embedded chart 7.5 High
- openwhyd Openwhyd before 1.65.1 NoSQL Injection via POST /api/user 6.9 Medium
- suitecrm SuiteCRM: Time-Based Blind SQL Injection via AOR_Reports ORDER BY Clause Allows Data Exfiltration by Any Authenticated User 8.8 High
- suitecrm SuiteCRM: Authenticated SQL Injection in v4_1 get_entry_list rest api 8.8 High
- mongodb entity framework core provider EF Core provider: pipeline-form ExecuteUpdate evaluates a user string setter as a $-field reference 2.3 Low
- yeti-platform yeti Yeti: Authenticated AQL injection via unvalidated search sorting and filter_aliases parameters 7.6 High
- dromara jpom Jpom 2.10.0 through 2.11.12 Authentication Bypass via JPOM-USER-TOKEN Header 9.3 Critical
- n8n-io n8n n8n before 1.123.85, 2.43.5, and 2.44.1 Filter Injection via Quick Base Node Where Parameter 7.0 High
- n8n-io n8n n8n before 1.123.85, 2.43.5, and 2.44.1 OData $filter Injection via Outlook and SharePoint Nodes 6.9 Medium
- mongodb java driver NoSQL injection via mismatched BSON size prefix in raw document splice to the wire protocol 6.9 Medium
- walinejs waline Waline login accepts a non-string email as a match-all MongoDB query 6.5 Medium
- parse-community parse-server Parse Server 9.0.0 before 9.10.5-alpha.6 ACL Bypass via $relatedTo Query 5.3 Medium
- asterisk, asterisk certified-asterisk +1 more Asterisk: LDAP Filter Injection in res_config_ldap via SIP Username (Unauthenticated Information Disclosure) 6.9 Medium
- intranda goobi-viewer-core Goobi viewer: Solr injection via unvalidated region parameter in spatial search 5.3 Medium
- intranda goobi-viewer-core Goobi viewer: Solr query injection via the legacy RSS servlet q and filterQuery parameters 5.3 Medium
- mongodb c# driver Update operator injection via single-element list rewriting in the update builder 7.1 High
- mongodb c# driver NoSQL injection via dot and dollar characters in LINQ filter field names and dictionary keys 7.2 High
- mongodb c# driver NoSQL operator injection via unvalidated replacement document in findOneAndReplace 5.3 Medium
- stevereiner flexible-graphrag Flexible GraphRAG: Cypher/Graph Injection via broken string-escaping in FalkorDB adapter (_escape()) - full graph wipe from ingested-document content 7.1 High
- splunk, splunk enterprise, secure gateway +2 more SPL Injection through the REST API in Splunk Secure Gateway 4.3 Medium
- polonel trudesk Trudesk through 1.2.11 Username Enumeration via Regex Injection in /api/v1/login 6.9 Medium
- polonel trudesk Trudesk through 1.2.11 MongoDB $where Injection via tickets search API 7.1 High
- @apostrophecms import-export, apostrophecms apostrophe +1 more ApostropheCMS import-export: NoSQL injection via update-key value lets a crafted import match and overwrite an unidentified document 5.4 Medium
- tandoorrecipes recipes Tandoor Recipes: ORM ORDER BY Injection via FK Traversal in Tandoor Recipes 6.5 Medium
- makeplane plane Plane: ORM Field Injection via Unvalidated `order_by` Parameter (Including Unauthenticated Path) 5.3 Medium
- @feathersjs mongodb, langchain-ai langchainjs +1 more LangChain: MongoDBChatMessageHistory query injection can allow cross-session access 6.0 Medium
- @langchain redis, langchain-ai langchainjs +1 more LangChain: RediSearch Filter Injection via Unescaped Tag/Text Values 2.3 Low
- makeplane plane Plane: Unauthenticated ORM field-name injection via `group_by`/`sub_group_by` on public deploy boards (DoS + blind oracle) 5.3 Medium
- tryghost ghost Ghost: Invite Token Disclosure in Ghost Admin API 7.5 High
- tryghost ghost Ghost 4.39.0 before 6.64.0 Invite Token Disclosure via Admin API 7.7 High
- tryghost ghost Ghost: Password Hash Ordering Disclosure in Ghost Admin API 3.1 Low
- tryghost ghost Ghost 0.7.2 before 6.64.0 Password Hash Ordering Disclosure via Admin API 2.3 Low
- 4turesearchdata djehuty djehuty: Unauthenticated SPARQL injection in the search API (`order`, `operator`, `key`) 7.1 High
- 4turesearchdata djehuty djehuty: Authenticated SPARQL injection in session editing allows writing arbitrary RDF triples 8.4 High
- tryghost ghost Ghost: Authorization Bypass in Comments Feature 6.5 Medium
- tryghost ghost Ghost 5.9.0 before 6.44.1 Authorization Bypass via Comments 7.1 High
- tryghost ghost Ghost 5.9.0 before 6.44.1 Authorization Bypass via Comment Like 7.1 High
- n8n-io n8n n8n before 2.39.6 and 2.40.x before 2.40.1 Filter Bypass via Parameter Interpolation 6.9 Medium
- n8n-io n8n n8n before 1.123.80, 2.39.6, and 2.40.1 NoSQL Injection via MongoDB Chat Memory 7.0 High
- apache apache-airflow-providers-google, apache software foundation airflow google provider +1 more Apache Airflow Google provider: Google Drive query injection via unescaped file and folder names 4.3 Medium
- parse-community parse-server Parse Server 9.0.0 Unauthenticated Installation Deletion via Operator Injection 8.7 High
- rapid7 platform Rapid7 Bulk Export MCP — GraphQL Query Injection in Export Status Lookup 2.7 Low
- discourse Discourse: Escape LIKE metacharacters in upload paths to prevent disclosure 6.5 Medium
- mongodb laravel mongodb (php) Unauthorized cache lock takeover via expression injection in lock owner values in MongoDB integration for Laravel 7.1 High
- mongodb mongoid NoSQL injection of JavaScript-executing query operators via unsafe-by-default operator guard 8.3 High
- cisco identity services engine software Cisco Identity Search Engine SXP REST API SQL Injection Vulnerability 9.1 Critical
- flowiseai flowise Flowise before 3.1.4 NoSQL Injection via sessionId 8.7 High
- mongodb c driver GridFS data disclosure and deletion via query-operator injection in file IDs in the MongoDB C Driver 6.1 Medium
- mongodb c++ driver, c\+\+ driver +1 more GridFS data disclosure and deletion via query-operator injection in file IDs in the MongoDB C++ Driver 6.1 Medium
- Show olderLoading…