CWE-943: NoSQL Injection, NoSQLi
The product generates a query intended to access or manipulate data in a data store such as a database, but it does not neutralize or incorrectly neutralizes special elements that can modify the intended logic of the query.
Also known as Improper Neutralization of Special Elements in Data Query Logic.
A kind of CWE-74 Injection.
From the CWE List. © The MITRE Corporation.
Newest
- mongodb java driverGridFS data disclosure and deletion via query-operator injection in file IDs in the MongoDB Java Driver6.1 Medium
- mongodb go driverGridFS data deletion via query-operator injection in file IDs in the MongoDB Go Driver6.1 Medium
- mongodb ruby driverGridFS data disclosure and deletion via query-operator injection in file IDs in the MongoDB Ruby Driver6.1 Medium
- mongodb python driverGridFS data disclosure and deletion via query-operator injection in file IDs in the MongoDB Python Driver6.1 Medium
- mongodb laravel mongodb (php), laravel mongodb +1 moreUnauthorized document disclosure via query-operator injection in polymorphic relation identifiers in MongoDB integration for Laravel7.1 High
- mongodb laravel mongodb (php), laravel mongodb +1 moreMass deletion and overwrite of embedded documents via query-operator injection in embedded record keys in MongoDB integration for Laravel7.1 High
- mongodb c# driver, c\# driver +1 moreRegular expression injection via unescaped characters in LINQ query translation in MongoDB C# Driver7.1 High
- mongodb c# driver, c\# driver +1 moreGridFS data disclosure and deletion via query-operator injection in file IDs in the MongoDB C# Driver6.1 Medium
- mongodb rust driverGridFS data disclosure and deletion via query-operator injection in file IDs in the MongoDB Rust Driver6.1 Medium
- mongodb php libraryGridFS data disclosure and deletion via query-operator injection in file IDs in the MongoDB PHP Library6.1 Medium
- mongodb laravel mongodb (php), laravel mongodb +1 moreUnauthorized document disclosure and deletion via query-operator injection in explicit equality filters in MongoDB integration for Laravel8.4 High
- mongodb, mongodb server, mongodb, inc. mongodb server +2 moreInsufficient Validation of Shard Key Values in MongoDB Server Leads to Query Operator Injection in Change Stream Post-Image Lookups2.3 Low
- microsoft discovery studioMicrosoft Discovery Studio Information Disclosure Vulnerability7.4 High
- n8nn8n before 2.36.2 Query Injection via Elasticsearch Firestore Nodes6.3 Medium
- elastic kibanaImproper Neutralization of Special Elements in Data Query Logic in Kibana Leading to Information Disclosure6.5 Medium
- No product listedFastGPT Community Edition 4.10.0 through 4.14.0 are vulnerable to a NoSQL injection in the POST ...5.3 Medium
- ash-project ash sqlUnescaped backslash allows LIKE wildcard injection in AshSql string search2.1 Low
- ash-project ash sqliteJSON path injection via unescaped get_path segments in AshSqlite2.1 Low
- mongodb c# driver, c\# driver +1 moreNoSQL injection via array replacement bypassing update shape validation in driver write path5.3 Medium
- mongodb c# driver, c\# driver +1 moreNoSQL injection via unquoted constant GroupBy keys in LINQ pipeline translation6.9 Medium
- mongodb php driver, php extension, php library +2 moreCross-tenant database retargeting via dot/NUL injection in namespace strings in the PHP Driver8.6 High
- spring ai, vmware spring ai +1 moreRediSearch Tag Injection in RedisChatMemoryRepository Allows Cross-Conversation Data Exposure4.3 Medium
- typo3 extension "apache solr for typo3 - enterprise search"Information Disclosure in extension "Apache Solr for TYPO3 - Enterprise Search" (solr)6.3 Medium
- typo3 extension "apache solr for typo3 - enterprise search"Information Disclosure in extension "Apache Solr for TYPO3 - Enterprise Search" (solr)6.3 Medium
- langchain-ai langgraph-checkpoint-mongodb, langgraph-store-mongodb, langchain-mongodb +2 moreLangChain MongoDB: NoSQL Operator Injection in MongoDBSaver.list() leading to cross-tenant data exposure7.7 High
- n8nn8n before 1.123.69 NoSQL Injection via MongoDB Node7.1 High
- splunk soarStructured Query Language Injection through the REST API in Splunk SOAR6.5 Medium
- splunk, splunk enterprise +1 moreSPL Injection through Splunk Web Form Tokens in Splunk Enterprise6.4 Medium
- splunk, splunk enterprise +1 moreSPL Injection through the REST API in Splunk Enterprise8.1 High
- splunk, splunk enterprise +1 moreSPL Injection through Monitoring Console Dashboard Inputs in Splunk Enterprise6.4 Medium
- splunk, splunk enterprise, secure gateway +2 moreSPL Injection through Splunk Web in Splunk Secure Gateway6.4 Medium
- splunk, splunk enterprise +1 moreSPL Injection through Cross-Site Request Forgery (CSRF) in the Event Type Builder in Splunk Web for Splunk Enterprise5.9 Medium
- splunk, splunk enterprise +1 moreStored SPL Injection through Deployment Server Broker Registration in Splunk Enterprise8.8 High
- splunk, splunk enterprise +1 moreSPL Command Safeguards Bypass through Splunk Web in Splunk Enterprise7.5 High
- ash-project ashPredicate injection in manage_relationship belongs_to lookup discloses secret lookup keys in Ash2.1 Low
- dgraph-io dgraphDgraph: DQL Injection via unvalidated regexp filter argument in GraphQL query rewriter8.6 High
- dynatrace-oss dynatrace-mcpDynatrace MCP Server: DQL injection via parameters not documented as DQL4.3 Medium
- budibase serverBudibase before 3.40.0 NoSQL Injection via MongoDB datasource7.1 High
- budibase serverBudibase Server before 3.40.0 NoSQL Injection via JSON Parameter8.7 High
- ahnlab epp managementAhnLab EPP Management v1.0.14.32-6249 was discovered to contain a NoSQL injection vulnerability...8.1 High
- mervinpraison praisonaiPraisonAI before 4.6.78 SQL/CQL Injection via vector dimension9.3 Critical
- progress moveit transferInstitution scope bypass vulnerability in custom reports6.4 Medium
- progress moveit transferTable scope bypass vulnerability in custom reports7.2 High
- beyondtrust privileged remote access, remote support, privilege remote access +2 moreHigh-Severity Vulnerability In Web Application Component of BeyondTrust Remote Support and Privileged Remote Access8.5 High
- apache camelApache Camel: Camel-Neo4j: JSON property names from the CamelNeo4jMatchProperties header are interpolated into the Cypher WHERE clause without validation, allowing Cypher injection (incomplete remedia…8.2 High
@asymmetric-effort/specifyjsnpm@asymmetric-effort/specifyjs: GraphQL gql tag allows metacharacter injection6.9 Medium- dgraph-io dgraphDgraph Vulnerable to DQL Injection via checkUserPassword GraphQL Query7.5 High
- rocket.chatRocket.Chat: Pre-Auth NoSQL Injection in OAuth2 Token Endpoint leading to Arbitrary User ATO9.1 Critical
- rocket.chatRocket.Chat: Pre-Auth NoSQL Injection in CAS Login Handler leading to Arbitrary CAS/SAML User Session Hijack9.1 Critical
- budibaseBudibase: Anonymous NoSQL operator injection via published-app query templates10.0 Critical
- Show moreLoading…