Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-8w3x-ww8f-273q

Опубликовано: 13 окт. 2026
Источник: github
Github: Не прошло ревью
CVSS4: 5.3
CVSS3: 5.4

Описание

An issue in MongoDB Server's aggregation framework can cause certain constant values to be handled incorrectly during internal query rewriting. Under certain conditions, an authenticated user with read access may receive field values in aggregation output that the query did not intend to return.

An issue in MongoDB Server's aggregation framework can cause certain constant values to be handled incorrectly during internal query rewriting. Under certain conditions, an authenticated user with read access may receive field values in aggregation output that the query did not intend to return.

EPSS

Процентиль: 4%
0.0015
Низкий

5.3 Medium

CVSS4

5.4 Medium

CVSS3

Дефекты

CWE-94

Связанные уязвимости

CVSS3: 5.4
ubuntu
28 дней назад

An issue in MongoDB Server's aggregation framework can cause certain constant values to be handled incorrectly during internal query rewriting. Under certain conditions, an authenticated user with read access may receive field values in aggregation output that the query did not intend to return.

CVSS3: 5.4
nvd
28 дней назад

An issue in MongoDB Server's aggregation framework can cause certain constant values to be handled incorrectly during internal query rewriting. Under certain conditions, an authenticated user with read access may receive field values in aggregation output that the query did not intend to return.

CVSS3: 5.4
debian
28 дней назад

An issue in MongoDB Server's aggregation framework can cause certain c ...

CVSS3: 6.5
altlinux
22 дня назад

ALT-PU-2026-18558: package `mongo7.0` update to version 7.0.45-alt1

EPSS

Процентиль: 4%
0.0015
Низкий

5.3 Medium

CVSS4

5.4 Medium

CVSS3

Дефекты

CWE-94