Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-jpw7-w4h8-xcfw

Опубликовано: 11 авг. 2026
Источник: github
Github: Не прошло ревью
CVSS4: 7.2
CVSS3: 8.1

Описание

An issue in MongoDB Server's Queryable Encryption maintenance operations could allow an authenticated user with privileges on one encrypted collection to cause unauthorized modification or destruction of data belonging to a different collection. This is due to insufficient validation of certain internal metadata references before they are used to perform operations on other namespaces.

An issue in MongoDB Server's Queryable Encryption maintenance operations could allow an authenticated user with privileges on one encrypted collection to cause unauthorized modification or destruction of data belonging to a different collection. This is due to insufficient validation of certain internal metadata references before they are used to perform operations on other namespaces.

EPSS

Процентиль: 7%
0.00179
Низкий

7.2 High

CVSS4

8.1 High

CVSS3

Дефекты

CWE-863

Связанные уязвимости

CVSS3: 8.1
nvd
около 1 месяца назад

An issue in MongoDB Server's Queryable Encryption maintenance operations could allow an authenticated user with privileges on one encrypted collection to cause unauthorized modification or destruction of data belonging to a different collection. This is due to insufficient validation of certain internal metadata references before they are used to perform operations on other namespaces.

CVSS3: 8.1
debian
около 1 месяца назад

An issue in MongoDB Server's Queryable Encryption maintenance operatio ...

EPSS

Процентиль: 7%
0.00179
Низкий

7.2 High

CVSS4

8.1 High

CVSS3

Дефекты

CWE-863