Gate $function's internal-only _internalSetObjToThis field behind an internal-client check

XMLWordPrintableJSON

    • Type: Task
    • Resolution: Unresolved
    • Priority: Major - P3
    • 8.2.13, 8.0.29, 7.0.40, 8.3.8, 9.0.0-rc2
    • Affects Version/s: None
    • Component/s: None
    • None
    • Query Integration
    • v9.0, v8.3, v8.2, v8.0, v7.0
    • None
    • None
    • None
    • None
    • None
    • None
    • None

      ExpressionFunction::parse() read the internal-only _internalSetObjToThis flag from user-supplied BSON without verifying the request came from an internal client, allowing an unauthenticated client to force stored-procedure loading and crash mongos via the invariant(!forceLoadOfStoredProcedures) check

            Assignee:
            Daniel Segel
            Reporter:
            Daniel Segel
            Votes:
            0 Vote for this issue
            Watchers:
            2 Start watching this issue

              Created:
              Updated: