Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-c3m4-h7px-8423

Опубликовано: 22 июл. 2026
Источник: github
Github: Не прошло ревью
CVSS4: 7.1
CVSS3: 6.5

Описание

The $_internalIndexKey aggregation expression can be used by any authenticated user to crash a MongoDB server (mongod). The expression fails to handle compound wildcard index specifications, triggering an internal consistency check that aborts the server process. The user must be able to run an aggregation pipeline.

The $_internalIndexKey aggregation expression can be used by any authenticated user to crash a MongoDB server (mongod). The expression fails to handle compound wildcard index specifications, triggering an internal consistency check that aborts the server process. The user must be able to run an aggregation pipeline.

EPSS

Процентиль: 35%
0.00402
Низкий

7.1 High

CVSS4

6.5 Medium

CVSS3

Дефекты

CWE-617

Связанные уязвимости

CVSS3: 6.5
ubuntu
4 месяца назад

The `$_internalIndexKey` aggregation expression can be used by any authenticated user to crash a MongoDB server (mongod). The expression fails to handle compound wildcard index specifications, triggering an internal consistency check that aborts the server process. The user must be able to run an aggregation pipeline.

CVSS3: 6.5
nvd
4 месяца назад

The `$_internalIndexKey` aggregation expression can be used by any authenticated user to crash a MongoDB server (mongod). The expression fails to handle compound wildcard index specifications, triggering an internal consistency check that aborts the server process. The user must be able to run an aggregation pipeline.

CVSS3: 6.5
debian
4 месяца назад

The `$_internalIndexKey` aggregation expression can be used by any aut ...

CVSS3: 6.5
redos
4 дня назад

Множественные уязвимости mongodb-org

CVSS3: 6.5
redos
4 дня назад

Множественные уязвимости mongodb-org

EPSS

Процентиль: 35%
0.00402
Низкий

7.1 High

CVSS4

6.5 Medium

CVSS3

Дефекты

CWE-617