Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-64ph-qr47-qxh4

Опубликовано: 17 мар. 2026
Источник: github
Github: Не прошло ревью
CVSS4: 6.1
CVSS3: 6.4

Описание

A specially crafted aggregation query with $lookup by an authenticated user with write privileges can cause a double-free or use-after-free memory issue in the slot-based execution (SBE) engine when an in-memory hash table is spilled to disk.

A specially crafted aggregation query with $lookup by an authenticated user with write privileges can cause a double-free or use-after-free memory issue in the slot-based execution (SBE) engine when an in-memory hash table is spilled to disk.

EPSS

Процентиль: 26%
0.00342
Низкий

6.1 Medium

CVSS4

6.4 Medium

CVSS3

Дефекты

CWE-415

Связанные уязвимости

CVSS3: 6.4
ubuntu
5 месяцев назад

A specially crafted aggregation query with $lookup by an authenticated user with write privileges can cause a double-free or use-after-free memory issue in the slot-based execution (SBE) engine when an in-memory hash table is spilled to disk.

CVSS3: 6.4
nvd
5 месяцев назад

A specially crafted aggregation query with $lookup by an authenticated user with write privileges can cause a double-free or use-after-free memory issue in the slot-based execution (SBE) engine when an in-memory hash table is spilled to disk.

CVSS3: 6.4
debian
5 месяцев назад

A specially crafted aggregation query with $lookup by an authenticated ...

CVSS3: 6.4
redos
около 1 месяца назад

Уязвимость mongodb-org

CVSS3: 6.4
fstec
6 месяцев назад

Уязвимость реализации хеш-таблицы механизма Slot-Based Execution (SBE) системы управления базами данных MongoDB, позволяющая нарушителю вызвать отказ в обслуживании

EPSS

Процентиль: 26%
0.00342
Низкий

6.1 Medium

CVSS4

6.4 Medium

CVSS3

Дефекты

CWE-415