Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-j72p-fv5p-4r63

Опубликовано: 10 июн. 2026
Источник: github
Github: Не прошло ревью
CVSS4: 7.2
CVSS3: 8.1

Описание

The $_internalApplyOplogUpdate aggregation pipeline stage can be used to execute a document diff containing a malformed binary diff to return memory out-of-bounds or crash the server. $_internalApplyOplogUpdate can be executed by any authenticated user with access to the aggregate command.

The $_internalApplyOplogUpdate aggregation pipeline stage can be used to execute a document diff containing a malformed binary diff to return memory out-of-bounds or crash the server. $_internalApplyOplogUpdate can be executed by any authenticated user with access to the aggregate command.

EPSS

Процентиль: 22%
0.00298
Низкий

7.2 High

CVSS4

8.1 High

CVSS3

Дефекты

CWE-1287
CWE-787

Связанные уязвимости

CVSS3: 8.1
ubuntu
около 2 месяцев назад

The $_internalApplyOplogUpdate aggregation pipeline stage can be used to execute a document diff containing a malformed binary diff to return memory out-of-bounds or crash the server. $_internalApplyOplogUpdate can be executed by any authenticated user with access to the aggregate command.

CVSS3: 8.1
nvd
около 2 месяцев назад

The $_internalApplyOplogUpdate aggregation pipeline stage can be used to execute a document diff containing a malformed binary diff to return memory out-of-bounds or crash the server. $_internalApplyOplogUpdate can be executed by any authenticated user with access to the aggregate command.

CVSS3: 8.1
debian
около 2 месяцев назад

The $_internalApplyOplogUpdate aggregation pipeline stage can be used ...

EPSS

Процентиль: 22%
0.00298
Низкий

7.2 High

CVSS4

8.1 High

CVSS3

Дефекты

CWE-1287
CWE-787