Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-494v-9jwj-989h

Опубликовано: 11 авг. 2026
Источник: github
Github: Не прошло ревью
CVSS4: 7.2
CVSS3: 8.1

Описание

An issue in MongoDB Server could allow an authenticated user with a limited database-scoped role to perform an action against protected system collections that their assigned privileges should not permit. This could result in critical system collections being dropped and recreated without proper authorization.

An issue in MongoDB Server could allow an authenticated user with a limited database-scoped role to perform an action against protected system collections that their assigned privileges should not permit. This could result in critical system collections being dropped and recreated without proper authorization.

EPSS

Процентиль: 35%
0.00406
Низкий

7.2 High

CVSS4

8.1 High

CVSS3

Дефекты

CWE-863

Связанные уязвимости

CVSS3: 8.1
ubuntu
3 месяца назад

An issue in MongoDB Server could allow an authenticated user with a limited database-scoped role to perform an action against protected system collections that their assigned privileges should not permit. This could result in critical system collections being dropped and recreated without proper authorization.

CVSS3: 8.1
nvd
3 месяца назад

An issue in MongoDB Server could allow an authenticated user with a limited database-scoped role to perform an action against protected system collections that their assigned privileges should not permit. This could result in critical system collections being dropped and recreated without proper authorization.

CVSS3: 8.1
debian
3 месяца назад

An issue in MongoDB Server could allow an authenticated user with a li ...

CVSS3: 8.1
redos
4 дня назад

Множественные уязвимости mongodb-org

CVSS3: 8.1
redos
4 дня назад

Множественные уязвимости mongodb-org

EPSS

Процентиль: 35%
0.00406
Низкий

7.2 High

CVSS4

8.1 High

CVSS3

Дефекты

CWE-863