logo

Database

Mongodb Connection String

Description

The source code repository contains sensitive information: MongoDB Connection String

Weakness:

009 - Sensitive information in source code

Category: Information Collection

Detection Strategy

    • Matches MongoDB Connection String patterns in source code and configuration files

Vulnerable code example

MONGO_URL=mongodb://admin:s3cr3tpassword@mongo.example.com:27017/mydb
const uri = "mongodb+srv://dbuser:MyP%40ssw0rd@cluster0.mongodb.net/app?retryWrites=true"
mongodb://root:hunter2@10.0.0.1:27017,10.0.0.2:27017/prod