MongoDB驱动GODRIVER-4075：数据库集合名未校验双引号和NULL字节漏洞

漏洞关键信息总结 漏洞概述 漏洞编号：GODRIVER-4075 标题：Validate database and collection name arguments against and NULL bytes 类型：Spec Change（规范变更） 优先级：Critical - P2 状态：Closed（已关闭），Resolution: Fixed 影响组件：Collection Management 标签：spec-compliance 修复版本：2.2 影响范围 该漏洞涉及驱动在发送数据库/集合名称时未正确校验，可能导致： - 数据库或集合名称中包含 或 NULL 字节时，驱动可能静默地重新解释这些名称，绕过服务器验证 - 服务器返回错误，但驱动未正确处理 上游变更：DRIVERS-3600（Summary of necessary driver changes） 修复方案 1. Spec 和 proot 测试： - C POC： - Rust POC：`https://github.com/mongodb/mongo-rust-driver-github.com/mongodb/mongo-rust-driver-github.com/mongodb/mongo-rust-driver-github.com/mongodb/mongo-rust-driver-github.com/mongodb/mongo-rust-driver-github.com/mongodb/mongo-rust-driver-github.com/mongodb/mongo-rust-driver-github.com/mongodb/mongo-rust-driver-github.com/mongodb/mongo-rust-driver-github.com/mongodb/mongo-rust-driver-github.com/mongodb/mongo-rust-driver-github.com/mongodb/mongo-rust-driver-github.com/mongodb/mongo-rust-driver-github.com/mongodb/mongo-rust-driver-github.com/mongodb/mongo-rust-driver-github.com/mongodb/mongo-rust-driver-github.com/mongodb/mongo-rust-driver-github.com/mongodb/mongo-rust-driver-github.com/mongodb/mongo-rust-driver-github.com/mongodb/mongo-rust-driver-github.com/mongodb/mongo-rust-driver-github.com/mongodb/mongo-rust-driver-github.com/mongodb/mongo-rust-driver-github.com/mongodb/mongo-rust-driver-github.com/mongodb/mongo-rust-driver-github.com/mongodb/mongo-rust-driver-github.com/mongodb/mongo-rust-driver-github.com/mongodb/mongo-rust-driver-github.com/mongodb/mongo-rust-driver-github.com/mongodb/mongo-rust-driver-github.com/mongodb/mongo-rust-driver-github.com/mongodb/mongo-rust-driver-github.com/mongodb/mongo-rust-driver-github.com/mongodb/mongo-rust-driver-github.com/mongodb/mongo-rust-driver-github.com/mongodb/mongo-rust-driver-github.com/mongodb/mongo-rust-driver-github.com/mongodb/mongo-rust-driver-github.com/mongodb/mongo-rust-driver-github.com/mongodb/mongo-rust-driver-github.com/mongodb/mongo-rust-driver-github.com/mongodb/mongo-rust-driver-github.com/mongodb/mongo-rust-driver-github.com/mongodb/mongo-rust-driver-github.com/mongodb/mongo-rust-driver-github.com/mongodb/mongo-rust-driver-github.com/mongodb/mongo-rust-driver-github.com/mongodb/mongo-rust-driver-github.com/mongodb/mongo-rust-driver-github.com/mongodb/mongo-rust-driver-github.com/mongodb/mongo-rust-driver-github.com/mongodb/mongo-rust-driver-github.com/mongodb/mongo-rust-driver-github.com/mongodb/mongo-rust-driver-github.com/mongodb/mongo-rust-driver-github.com/mongodb/mongo-rust-driver-github.com/mongodb/mongo-rust-driver-github.com/mongodb/mongo-rust-driver-github.com/mongodb/mongo-rust-driver-github.com/mongodb/mongo-rust-driver-github.com/mongodb/mongo-rust-driver-github.com/mongodb/mongo-rust-driver-github.com/mongodb/mongo-rust-driver-github.com/mongodb/mongo-rust-driver-github.com/mongodb/mongo-rust-driver-github.com/mongodb/mongo-rust-driver-github.com/mongodb/mongo-rust-driver-github.com/mongodb/mongo-rust-driver-github.com/mongodb/mongo-rust-driver-github.com/mongodb/mongo-rust-driver-github.com/mongodb/mongo-rust-driver-github.com/mongodb/mongo-rust-driver-github.com/mongodb/mongo-rust-driver-github.com/mongodb/mongo-rust-driver-github.com/mongodb/mongo-rust-driver-github.com/mongodb/mongo-rust-driver-github.com/mongodb/mongo-rust-driver-github.com/mongodb/mongo-rust-driver-github.com/mongodb/mongo-rust-driver-github.com/mongodb/mongo-rust-driver-github.com/mongodb/mongo-rust-driver-github.com/mongodb/mongo-rust-driver-github.com/mongodb/mongo-rust-driver-github.com/mongodb/mongo-rust-driver-github.com/mongodb/mongo-rust-driver-github.com/mongodb/mongo-rust-driver-github.com/mongodb/mongo-rust-driver-github.com/mongodb/mongo-rust-driver-github.com/mongodb/mongo-rust-driver-github.com/mongodb/mongo-rust-driver-github.com/mongodb/mongo-rust-driver-github.com/mongodb/mongo-rust-driver-github.com/mongodb/mongo-rust-driver-github.com/mongodb/mongo-rust-driver-github.com/mongodb/mongo-rust-driver-github.com/mongodb/mongo-rust-driver-github.com/mongodb/mongo-rust-driver-github.com/mongodb/mongo-rust-driver-github.com/mongodb/mongo-rust-driver-github.com/mongodb/mongo-rust-driver-github.com/mongodb/mongo-rust-driver-github.com/mongodb/mongo-rust-driver-github.com/mongodb/mongo-rust-driver-github.com/mongodb/mongo-rust-driver-github.com/mongodb/mongo-rust-driver-github.com/mongodb/mongo-rust-driver-github.com/mongodb/mongo-rust-driver-github.com/mongodb/mongo-rust-driver-github.com/mongodb/mongo-rust-driver-github.com/mongodb/mongo-rust-driver-github.com/mongodb/mongo-rust-driver-github.com/mongodb/mongo-rust-driver-github.com/mongodb/mongo-rust-driver-github.com/mongodb/mongo-rust-driver-github.com/mongodb/mongo-rust-driver-github.com/mongodb/mongo-rust-driver-github.com/mongodb/mongo-rust-driver-github.com/mongodb/mongo-rust-driver-github.com/mongodb/mongo-rust-driver-github.com/mongodb/mongo-rust-driver-github.com/mongodb/mongo-rust-driver-github.com/mongodb/mongo-rust-driver-github.com/mongodb/mongo-rust-driver-gi

目标达成感谢每一位支持者 — 我们达成了 100% 目标！

MongoDB驱动GODRIVER-4075：数据库集合名未校验双引号和NULL字节漏洞

同源更多文章

目标达成 感谢每一位支持者 — 我们达成了 100% 目标！

MongoDB驱动GODRIVER-4075：数据库集合名未校验双引号和NULL字节漏洞

同源更多文章

目标达成感谢每一位支持者 — 我们达成了 100% 目标！