Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-64h4-qmc6-6gw9

Опубликовано: 22 июл. 2026
Источник: github
Github: Не прошло ревью
CVSS4: 7.1
CVSS3: 6.5

Описание

An authenticated user with limited read privileges may be able to access documents from collections they are not authorized to read, due to an inconsistency in how the $graphLookup aggregation stage is evaluated during authorization and during execution. Affected scenarios involve collections referenced within existing view pipeline definitions.

An authenticated user with limited read privileges may be able to access documents from collections they are not authorized to read, due to an inconsistency in how the $graphLookup aggregation stage is evaluated during authorization and during execution. Affected scenarios involve collections referenced within existing view pipeline definitions.

EPSS

Процентиль: 37%
0.00426
Низкий

7.1 High

CVSS4

6.5 Medium

CVSS3

Дефекты

CWE-863

Связанные уязвимости

CVSS3: 6.5
ubuntu
4 месяца назад

An authenticated user with limited read privileges may be able to access documents from collections they are not authorized to read, due to an inconsistency in how the $graphLookup aggregation stage is evaluated during authorization and during execution. Affected scenarios involve collections referenced within existing view pipeline definitions.

CVSS3: 6.5
nvd
4 месяца назад

An authenticated user with limited read privileges may be able to access documents from collections they are not authorized to read, due to an inconsistency in how the $graphLookup aggregation stage is evaluated during authorization and during execution. Affected scenarios involve collections referenced within existing view pipeline definitions.

CVSS3: 6.5
debian
4 месяца назад

An authenticated user with limited read privileges may be able to acce ...

CVSS3: 6.5
redos
4 дня назад

Уязвимость mongodb-org

CVSS3: 6.5
redos
4 дня назад

Уязвимость mongodb-org

EPSS

Процентиль: 37%
0.00426
Низкий

7.1 High

CVSS4

6.5 Medium

CVSS3

Дефекты

CWE-863