Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-4xx6-93fv-qc5x

Опубликовано: 08 сент. 2026
Источник: github
Github: Не прошло ревью
CVSS4: 7.1
CVSS3: 6.5

Описание

A security issue in MongoDB Server allows an authenticated user with write privileges to trigger a persistent fatal assertion crash by sending specially crafted retryable write commands. The crash state is durably persisted, causing the server process to repeatedly crash on restart and potentially propagating to additional nodes in a sharded cluster. Manual intervention is required to restore service availability.

A security issue in MongoDB Server allows an authenticated user with write privileges to trigger a persistent fatal assertion crash by sending specially crafted retryable write commands. The crash state is durably persisted, causing the server process to repeatedly crash on restart and potentially propagating to additional nodes in a sharded cluster. Manual intervention is required to restore service availability.

EPSS

Процентиль: 35%
0.00402
Низкий

7.1 High

CVSS4

6.5 Medium

CVSS3

Дефекты

CWE-617

Связанные уязвимости

CVSS3: 6.5
ubuntu
2 месяца назад

A security issue in MongoDB Server allows an authenticated user with write privileges to trigger a persistent fatal assertion crash by sending specially crafted retryable write commands. The crash state is durably persisted, causing the server process to repeatedly crash on restart and potentially propagating to additional nodes in a sharded cluster. Manual intervention is required to restore service availability.

CVSS3: 6.5
nvd
2 месяца назад

A security issue in MongoDB Server allows an authenticated user with write privileges to trigger a persistent fatal assertion crash by sending specially crafted retryable write commands. The crash state is durably persisted, causing the server process to repeatedly crash on restart and potentially propagating to additional nodes in a sharded cluster. Manual intervention is required to restore service availability.

CVSS3: 6.5
debian
2 месяца назад

A security issue in MongoDB Server allows an authenticated user with w ...

CVSS3: 6.5
redos
8 дней назад

Уязвимость mongodb-org

CVSS3: 6.5
redos
8 дней назад

Уязвимость mongodb-org

EPSS

Процентиль: 35%
0.00402
Низкий

7.1 High

CVSS4

6.5 Medium

CVSS3

Дефекты

CWE-617