Bykea · Report #3249406
MongoDB Query Logs & Schema Leak via Unauthenticated Endpoint
Validstatus
lowseverity
43upvotes
17 Sept 2025disclosed
Summary
An unauthenticated health check endpoint was discovered by @sameer_ali exposing basic system and infrastructure details. While no direct exploit was identified, the information could assist an attacker in reconnaissance and lateral movement.
How it was found
The write-up for this report has not been downloaded yet, or the program disclosed it without one. Read it on HackerOne.