Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-4wcp-phx2-2w2x

Опубликовано: 10 фев. 2022
Источник: github
Github: Не прошло ревью
CVSS3: 7.1

Описание

An authenticated user without any specific authorizations may be able to repeatedly invoke the features command where at a high volume may lead to resource depletion or generate high lock contention. This may result in denial of service and in rare cases could result in id field collisions.

An authenticated user without any specific authorizations may be able to repeatedly invoke the features command where at a high volume may lead to resource depletion or generate high lock contention. This may result in denial of service and in rare cases could result in id field collisions.

EPSS

Процентиль: 35%
0.00142
Низкий

7.1 High

CVSS3

Дефекты

CWE-770

Связанные уязвимости

CVSS3: 5.4
ubuntu
около 4 лет назад

An authenticated user without any specific authorizations may be able to repeatedly invoke the features command where at a high volume may lead to resource depletion or generate high lock contention. This may result in denial of service and in rare cases could result in id field collisions. This issue affects MongoDB Server v5.0 versions prior to and including 5.0.3; MongoDB Server v4.4 versions prior to and including 4.4.9; MongoDB Server v4.2 versions prior to and including 4.2.16 and MongoDB Server v4.0 versions prior to and including 4.0.28

CVSS3: 5.4
redhat
около 4 лет назад

An authenticated user without any specific authorizations may be able to repeatedly invoke the features command where at a high volume may lead to resource depletion or generate high lock contention. This may result in denial of service and in rare cases could result in id field collisions. This issue affects MongoDB Server v5.0 versions prior to and including 5.0.3; MongoDB Server v4.4 versions prior to and including 4.4.9; MongoDB Server v4.2 versions prior to and including 4.2.16 and MongoDB Server v4.0 versions prior to and including 4.0.28

CVSS3: 5.4
nvd
около 4 лет назад

An authenticated user without any specific authorizations may be able to repeatedly invoke the features command where at a high volume may lead to resource depletion or generate high lock contention. This may result in denial of service and in rare cases could result in id field collisions. This issue affects MongoDB Server v5.0 versions prior to and including 5.0.3; MongoDB Server v4.4 versions prior to and including 4.4.9; MongoDB Server v4.2 versions prior to and including 4.2.16 and MongoDB Server v4.0 versions prior to and including 4.0.28

CVSS3: 5.4
debian
около 4 лет назад

An authenticated user without any specific authorizations may be able ...

EPSS

Процентиль: 35%
0.00142
Низкий

7.1 High

CVSS3

Дефекты

CWE-770