MongoDB App Injection

Authentication Bypass

 

Denial of Service

 

Sensitive data leak

Solution 1: to_s

Solution 2: mongoid_rails

Solution 3