Atlas SQL JDBC Driver <=4.0.0: OIDC discovery endpoints not scheme-validated - attacker-controlled URI dispatched to OS protocol handler

Özet

Türkçe özeti yalnızca kritik ve yüksek önemdeki açıklar için hazırlıyoruz. Bu açık için kaynağın kendi açıklamasını gösteriyoruz.

A URI redirection weakness exists in the authentication component of the Atlas SQL JDBC Driver. During an interactive sign-in flow the driver accepts endpoint addresses supplied by the remote endpoint it is pointed at without validating their scheme, and passes the resulting address to the local default protocol handler. An unauthenticated remote party that controls the endpoint a user elects to connect to may cause an address of its choosing to be opened on the user's system; user interaction is required.

Etkilenen sürümler1 yazılım

Kaynaklar4 kaynak

• CVE.org kaydı
• NVD kaydı
• mongodb.com/docs/sql-interface/changelog Diğer
• jira.mongodb.org/browse/SQL-3539 Diğer

Kayıt geçmişi

1. 3 Kas 2026 21:47Yayımlandı

İlgili açıklar

• 5,3 CVE-2026-121373Symfony: HtmlSanitizer MetaRefreshAttributeSanitizer Matches Only a Narrow Subset of the Browser Refresh Grammar (Incomplete Fix for CVE-2026-48761)
• 5,1 CVE-2026-11753A vulnerability has been identified in armeria-saml versions prior to 1.41.1, where attacker-controlled RelayState is…
• 5,1 CVE-2026-111754Angular: Open Redirect via Protocol-Relative URLs in Server-Side Rendering (SSR)
• 5,3 CVE-2026-120327Open Redirection in extension "Mail" (mail)
• 4,3 CVE-2024-12141Open Redirect via Callback URL Validation in WSO2 Products Allows Phishing Attacks
• 5,4 CVE-2024-2372Open Redirection via Unsanitized User Input in Multiple WSO2 Products Allows Phishing Attacks