CyberRota Analysis
AI-GeneratedMongoDB's Atlas Vector Search feature is vulnerable, allowing authenticated users with read access to one view to access documents from another protected view within the same collection due to inadequate handling of user-supplied fields. This could lead to unauthorized data exposure, compromising sensitive information. Organizations using MongoDB, particularly those leveraging the Atlas Vector Search feature, should prioritize addressing this vulnerability to safeguard their data integrity.
Original NVD Description
An issue in MongoDB Server's Atlas Vector Search feature could allow an authenticated user with read access to one view to retrieve documents from a different, protected view over the same underlying collection. This is due to insufficient handling of certain user-supplied fields when constructing an internal request forwarded to the search process.