PT-2020-21263 · Mongodb · Express-Cart
Published
2020-09-01
·
Updated
2020-09-01
None
No severity ratings or metrics are available. When they are, we'll update the corresponding info on the page.
Name of the Vulnerable Software and Affected Versions
express-cart versions prior to 1.1.8
Description
The issue is caused by the lack of user input sanitization in the login handlers, allowing NoSQL injection. Specifically, parameters from the JSON body are sent directly into the MongoDB query, enabling the insertion of operators. These operators can be used to extract field values, similar to blind SQL injection, with the
$regex operator being used to guess each character of a token.Recommendations
Update to version 1.1.8 or later.
SQL injection
Found an issue in the description? Have something to add? Feel free to write us 👾
Weakness Enumeration
Related Identifiers
Affected Products
Express-Cart