Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-cpxv-jhq7-7xvw

Опубликовано: 11 авг. 2026
Источник: github
Github: Не прошло ревью
CVSS4: 7.1
CVSS3: 6.5

Описание

An issue in MongoDB Server's aggregation framework could allow an authenticated user with only read privileges to perform write operations against collections they should not be able to modify. This is due to an internal-use aggregation stage being reachable by external clients without an appropriate authorization check on its embedded operations.

An issue in MongoDB Server's aggregation framework could allow an authenticated user with only read privileges to perform write operations against collections they should not be able to modify. This is due to an internal-use aggregation stage being reachable by external clients without an appropriate authorization check on its embedded operations.

EPSS

Процентиль: 11%
0.00203
Низкий

7.1 High

CVSS4

6.5 Medium

CVSS3

Дефекты

CWE-862

Связанные уязвимости

CVSS3: 6.5
ubuntu
около 1 месяца назад

An issue in MongoDB Server's aggregation framework could allow an authenticated user with only read privileges to perform write operations against collections they should not be able to modify. This is due to an internal-use aggregation stage being reachable by external clients without an appropriate authorization check on its embedded operations.

CVSS3: 6.5
nvd
около 1 месяца назад

An issue in MongoDB Server's aggregation framework could allow an authenticated user with only read privileges to perform write operations against collections they should not be able to modify. This is due to an internal-use aggregation stage being reachable by external clients without an appropriate authorization check on its embedded operations.

CVSS3: 6.5
debian
около 1 месяца назад

An issue in MongoDB Server's aggregation framework could allow an auth ...

EPSS

Процентиль: 11%
0.00203
Низкий

7.1 High

CVSS4

6.5 Medium

CVSS3

Дефекты

CWE-862