PT-2026-83274 · Mongodb · Mongosql Transition Readiness Tool
CVE-2026-76794
·
Published
2026-08-28
·
Updated
2026-08-28
CVSS v3.1
4.6
Medium
| Vector | AV:N/AC:L/PR:L/UI:R/S:U/C:L/I:L/A:N |
Name of the Vulnerable Software and Affected Versions
MongoSQL Transition Readiness Tool (affected versions not specified)
Description
MongoSQL Transition Readiness Tool fails to sufficiently encode database metadata before including it in generated HTML. A MongoDB user with write access can introduce crafted metadata that may cause script code to run when another user generates and opens the report, potentially exposing report contents or altering its display.
Recommendations
At the moment, there is no information about a newer version that contains a fix for this vulnerability.
XSS
Found an issue in the description? Have something to add? Feel free to write us 👾
Weakness Enumeration
Related Identifiers
Affected Products
Mongosql Transition Readiness Tool