Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

PRP: Unauthenticated Mongodb server #479

Open
am0o0 opened this issue May 4, 2024 · 0 comments
Open

PRP: Unauthenticated Mongodb server #479

am0o0 opened this issue May 4, 2024 · 0 comments
Labels
Contributor queue When a contributor has already one issue/PR in review, we put the following ones on hold with this.

Comments

@am0o0
Copy link
Contributor

am0o0 commented May 4, 2024

MongoDB doesn't enable auth by default, so the possibility of accidentally exposing a MongoDB is high.
I don't think checking with RCE is possible, but we can check access easily with MongoDB java driver.

@tooryx tooryx added the Contributor queue When a contributor has already one issue/PR in review, we put the following ones on hold with this. label May 28, 2024
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
Contributor queue When a contributor has already one issue/PR in review, we put the following ones on hold with this.
Projects
None yet
Development

No branches or pull requests

2 participants