Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-8v5c-chfg-fcjx

Опубликовано: 24 мая 2022
Источник: github
Github: Не прошло ревью
CVSS3: 6.5

Описание

An authorized user may trigger an invariant which may result in denial of service or server exit if a relevant aggregation request is sent to a shard. Usually, the requests are sent via mongos and special privileges are required in order to know the address of the shards and to log in to the shards of an auth enabled environment.

An authorized user may trigger an invariant which may result in denial of service or server exit if a relevant aggregation request is sent to a shard. Usually, the requests are sent via mongos and special privileges are required in order to know the address of the shards and to log in to the shards of an auth enabled environment.

EPSS

Процентиль: 64%
0.00474
Низкий

6.5 Medium

CVSS3

Дефекты

CWE-617

Связанные уязвимости

CVSS3: 6.5
ubuntu
около 4 лет назад

An authorized user may trigger an invariant which may result in denial of service or server exit if a relevant aggregation request is sent to a shard. Usually, the requests are sent via mongos and special privileges are required in order to know the address of the shards and to log in to the shards of an auth enabled environment. This issue affects MongoDB Server v5.0 versions prior to and including 5.0.2.

CVSS3: 6.5
redhat
около 4 лет назад

An authorized user may trigger an invariant which may result in denial of service or server exit if a relevant aggregation request is sent to a shard. Usually, the requests are sent via mongos and special privileges are required in order to know the address of the shards and to log in to the shards of an auth enabled environment. This issue affects MongoDB Server v5.0 versions prior to and including 5.0.2.

CVSS3: 6.5
nvd
около 4 лет назад

An authorized user may trigger an invariant which may result in denial of service or server exit if a relevant aggregation request is sent to a shard. Usually, the requests are sent via mongos and special privileges are required in order to know the address of the shards and to log in to the shards of an auth enabled environment. This issue affects MongoDB Server v5.0 versions prior to and including 5.0.2.

CVSS3: 6.5
debian
около 4 лет назад

An authorized user may trigger an invariant which may result in denial ...

EPSS

Процентиль: 64%
0.00474
Низкий

6.5 Medium

CVSS3

Дефекты

CWE-617