RockMongo V1.1.8 XSS

Published on
10 Jan 2022
Vulnerability

Description

RockMongo is a MongoDB administration tool written in PHP. Using which you can manage your server, databases, collections, documents, indexes, and much more.

A vulnerability in RockMongo V1.1.8 allows attackers to inject arbitrary javascript into the response returned by the application that leads to cross-site scripting (XSS).

Recommendation

  • Update RockMongo to the latest version
Experience the Beagle Security platform
Unlock one full penetration test and all Advanced plan features free for 10 days