CVE-2025-3082
User may override a view's collation and gain unauthorized access to underlying data
We use these services and cookies to improve your user experience. You may opt out if you wish, however, this may limit some features on this site.
Please see our statement on Data Privacy.
User may override a view's collation and gain unauthorized access to underlying data
A user authorized to access a view may be able to alter the intended collation, allowing them to access to a different or unintended view of underlying data. This issue affects MongoDB Server v5.0 version prior to 5.0.31, MongoDB Server v6.0 version prior to 6.0.20, MongoDB Server v7.0 version prior to 7.0.14 and MongoDB Server v7.3 versions prior to 7.3.4.
Reserved 2025-04-01 | Published 2025-04-01 | Updated 2025-04-01 | Assigner mongodbCWE-284: Improper Access Control
jira.mongodb.org/browse/SERVER-103151
Support options
