Gate $function's internal-only _internalSetObjToThis field behind an internal-client check

XMLWordPrintableJSON

    • Query Integration
    • Fully Compatible
    • v9.0, v8.3, v8.2, v8.0, v7.0
    • None
    • None
    • None
    • None
    • None
    • None
    • None

      ExpressionFunction::parse() read the internal-only _internalSetObjToThis flag from user-supplied BSON without verifying the request came from an internal client, allowing an unauthenticated client to force stored-procedure loading and crash mongos via the invariant(!forceLoadOfStoredProcedures) check

            Assignee:
            Daniel Segel
            Reporter:
            Daniel Segel
            Votes:
            0 Vote for this issue
            Watchers:
            4 Start watching this issue

              Created:
              Updated:
              Resolved: