← Späť na vyhľadávanie CVE

CVE-2026-14881

MongoDB Compass

Popis

When importing connections in Compass it is possible to override some connection options that are otherwise can-t be changed via connection form. In particular it is possible to provide a custom browser open command for OIDC auth flow that is usually can be set only globally via Compass settings.

CVSS 7.8EPSS 0.152%Riziko 0.79
Zobraziť zdroj
Zverejnené
2026-07-22 20:16:48
Dotknuté verzie
unknown
Typ
Kritický softvér
Posledná úprava
2026-07-24 05:16:38
Vektor
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H