MongoDB Server Improper Access Control Vulnerability Allowing Unauthorized Data Access

A vulnerability exists in MongoDB Server that allows a user with access to a view to modify the view's collation. This alteration could lead to unauthorized access to different or unintended underlying data. The issue is present in MongoDB Server versions 5.0 prior to 5.0.31, 6.0 prior to 6.0.20, 7.0 prior to 7.0.14, and 7.3 prior to 7.3.4.

Impact

Exploitation of this vulnerability could result in unauthorized access to underlying data by allowing users to manipulate view collations.