Go/github.com/mongodb/mongo-tools CVE-2020-7924: medium 6.5, EPSS 0.74%
MongoDB Tools Improper Certificate Validation vulnerability
Action: Upgrade github.com/mongodb/mongo-tools to 100.2.0 or later.
go get github.com/mongodb/mongo-tools@v100.2.0Affected
| introduced | fixed | last affected |
|---|---|---|
| 100.0.0 | 100.2.0 | - |
Fixed versions
| 100.2.0 |
Sources
- osv: GHSA-6cwm-wm82-hgrw
- https://nvd.nist.gov/vuln/detail/CVE-2020-7924
- https://github.com/mongodb/mongo-tools/commit/8c1800b5155084f954a39a1f2f259efac3bb86de
- https://github.com/advisories/GHSA-6cwm-wm82-hgrw
- https://github.com/mongodb/mongo-tools
- https://jira.mongodb.org/browse/TOOLS-2587
CVE-2020-7924 · published · modified · JSON