Skip to content
Predicting MongoDB ObjectId() continuously in Rocket.Chat
aikido.dev | blog | #ai-security | #vulnerability-research | #rocket-chat | #web-security | #mongodb | #objectid | #predictable-ids | #unauthenticated-access
Summary
Aikido shows how MongoDB ObjectId predictability let an unauthenticated attacker enumerate every uploaded file in Rocket.Chat by continuously predicting new IDs; fixed in 8.5.1 and earlier branches.
- Published
- Collected