Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-75j9-xw79-qxqv

Опубликовано: 01 апр. 2025
Источник: github
Github: Не прошло ревью
CVSS3: 6.5

Описание

When run on commands with certain arguments set, explain may fail to validate these arguments before using them. This can lead to crashes in router servers. This affects MongoDB Server v5.0 prior to 5.0.31, MongoDB Server v6.0 prior to 6.0.20, MongoDB Server v7.0 prior to 7.0.16 and MongoDB Server v8.0 prior to 8.0.4

When run on commands with certain arguments set, explain may fail to validate these arguments before using them. This can lead to crashes in router servers. This affects MongoDB Server v5.0 prior to 5.0.31, MongoDB Server v6.0 prior to 6.0.20, MongoDB Server v7.0 prior to 7.0.16 and MongoDB Server v8.0 prior to 8.0.4

EPSS

Процентиль: 19%
0.00059
Низкий

6.5 Medium

CVSS3

Дефекты

CWE-703

Связанные уязвимости

CVSS3: 6.5
ubuntu
3 месяца назад

When run on commands with certain arguments set, explain may fail to validate these arguments before using them. This can lead to crashes in router servers. This affects MongoDB Server v5.0 prior to 5.0.31, MongoDB Server v6.0 prior to 6.0.20, MongoDB Server v7.0 prior to 7.0.16 and MongoDB Server v8.0 prior to 8.0.4

CVSS3: 6.5
nvd
3 месяца назад

When run on commands with certain arguments set, explain may fail to validate these arguments before using them. This can lead to crashes in router servers. This affects MongoDB Server v5.0 prior to 5.0.31, MongoDB Server v6.0 prior to 6.0.20, MongoDB Server v7.0 prior to 7.0.16 and MongoDB Server v8.0 prior to 8.0.4

CVSS3: 6.5
debian
3 месяца назад

When run on commands with certain arguments set, explain may fail to v ...

CVSS3: 6.5
fstec
3 месяца назад

Уязвимость функции explain системы управления базами данных MongoDB, позволяющая нарушителю вызвать отказ в обслуживании

CVSS3: 8.1
redos
около 2 месяцев назад

Множественные уязвимости mongodb-org

EPSS

Процентиль: 19%
0.00059
Низкий

6.5 Medium

CVSS3

Дефекты

CWE-703