云虫漏洞情报

CVE-2026-81523 - A missing input-validation issue in MongoDB libmongocrypt's automatic-encryption context setup allows a caller-supplied database identifier to be accepted without sanitization. The resulting impact is limited to incorrect schema selection, which may lead to limited disclosure or modification of information handled by the application. - 漏洞详情

漏洞编号:CVE-2026-81523

风险等级:中危

漏洞来源:CVE

CVE 编号:CVE-2026-81523

CNNVD 编号:-

厂商/产品:- / -

影响范围:-

CWE:CWE-74

发布/更新时间:2026-08-27 / 2026-08-28

漏洞描述

A missing input-validation issue in MongoDB libmongocrypt's automatic-encryption context setup allows a caller-supplied database identifier to be accepted without sanitization. The resulting impact is limited to incorrect schema selection, which may lead to limited disclosure or modification of information handled by the application.

相关链接

相关漏洞

« 返回首页