CyberRota Analysis
AI-GeneratedThe MongoDB Go Driver is vulnerable due to improper handling of structured file identifiers in its GridFS component, allowing an authenticated user to manipulate these identifiers. This can lead to the unintended deletion of all file chunks in a specific GridFS bucket, rendering the stored content inaccessible. Organizations using MongoDB, particularly those with applications that allow user-supplied identifiers, should prioritize addressing this vulnerability to prevent potential data loss.
Original NVD Description
Improper neutralization of special elements in data query logic in the GridFS component of the MongoDB Go Driver can cause a caller-supplied structured file identifier to be interpreted as a query condition rather than as a literal identifier. An authenticated user who can influence the identifier passed by an affected application may cause all GridFS file chunks in the affected bucket to be removed, rendering stored file content unreadable.