Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-fq6g-pppq-26pj

Опубликовано: 22 июл. 2026
Источник: github
Github: Не прошло ревью
CVSS4: 7.1
CVSS3: 6.5

Описание

Improper handling of DBPointer objects during BSON serialization in MongoDB's server-side JavaScript engine can result in internal process memory contents being included in data returned to the client. This constitutes an unintended information disclosure affecting deployments that use server-side JavaScript.

Improper handling of DBPointer objects during BSON serialization in MongoDB's server-side JavaScript engine can result in internal process memory contents being included in data returned to the client. This constitutes an unintended information disclosure affecting deployments that use server-side JavaScript.

EPSS

Процентиль: 14%
0.00227
Низкий

7.1 High

CVSS4

6.5 Medium

CVSS3

Дефекты

CWE-843

Связанные уязвимости

CVSS3: 6.5
ubuntu
около 1 месяца назад

Improper handling of DBPointer objects during BSON serialization in MongoDB's server-side JavaScript engine can result in internal process memory contents being included in data returned to the client. This constitutes an unintended information disclosure affecting deployments that use server-side JavaScript.

CVSS3: 6.5
nvd
около 1 месяца назад

Improper handling of DBPointer objects during BSON serialization in MongoDB's server-side JavaScript engine can result in internal process memory contents being included in data returned to the client. This constitutes an unintended information disclosure affecting deployments that use server-side JavaScript.

CVSS3: 6.5
debian
около 1 месяца назад

Improper handling of DBPointer objects during BSON serialization in Mo ...

EPSS

Процентиль: 14%
0.00227
Низкий

7.1 High

CVSS4

6.5 Medium

CVSS3

Дефекты

CWE-843