Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-2cg2-x4m3-3vpp

Опубликовано: 24 мая 2022
Источник: github
Github: Не прошло ревью
CVSS3: 6.5

Описание

A user authorized to perform database queries may cause denial of service by issuing specially crafted queries, which violate an invariant in the query subsystem's support for geoNear. This issue affects: MongoDB Inc. MongoDB Server v4.5 versions prior to 4.5.1; v4.4 versions prior to 4.4.0-rc7; v4.2 versions prior to 4.2.8; v4.0 versions prior to 4.0.19.

A user authorized to perform database queries may cause denial of service by issuing specially crafted queries, which violate an invariant in the query subsystem's support for geoNear. This issue affects: MongoDB Inc. MongoDB Server v4.5 versions prior to 4.5.1; v4.4 versions prior to 4.4.0-rc7; v4.2 versions prior to 4.2.8; v4.0 versions prior to 4.0.19.

EPSS

Процентиль: 71%
0.01302
Низкий

6.5 Medium

CVSS3

Дефекты

CWE-755

Связанные уязвимости

CVSS3: 6.5
ubuntu
около 6 лет назад

A user authorized to perform database queries may cause denial of service by issuing specially crafted queries, which violate an invariant in the query subsystem's support for geoNear. This issue affects MongoDB Server v4.4 versions prior to 4.4.0-rc7; MongoDB Server v4.2 versions prior to 4.2.8 and MongoDB Server v4.0 versions prior to 4.0.19.

CVSS3: 6.5
redhat
больше 6 лет назад

A user authorized to perform database queries may cause denial of service by issuing specially crafted queries, which violate an invariant in the query subsystem's support for geoNear. This issue affects MongoDB Server v4.4 versions prior to 4.4.0-rc7; MongoDB Server v4.2 versions prior to 4.2.8 and MongoDB Server v4.0 versions prior to 4.0.19.

CVSS3: 6.5
nvd
около 6 лет назад

A user authorized to perform database queries may cause denial of service by issuing specially crafted queries, which violate an invariant in the query subsystem's support for geoNear. This issue affects MongoDB Server v4.4 versions prior to 4.4.0-rc7; MongoDB Server v4.2 versions prior to 4.2.8 and MongoDB Server v4.0 versions prior to 4.0.19.

CVSS3: 6.5
debian
около 6 лет назад

A user authorized to perform database queries may cause denial of serv ...

CVSS3: 6.5
altlinux
больше 6 лет назад

ALT-PU-2020-4248: package `mongo` update to version 4.2.8-alt1

EPSS

Процентиль: 71%
0.01302
Низкий

6.5 Medium

CVSS3

Дефекты

CWE-755