Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-m6gv-qfwj-frx8

Опубликовано: 08 сент. 2026
Источник: github
Github: Не прошло ревью
CVSS4: 5.3
CVSS3: 4.3

Описание

A heap out-of-bounds read security issue exists in the query planning component of MongoDB Server. An authenticated user with database read and write privileges can trigger the security issue through crafted query operations, causing the server to read memory beyond allocated buffer boundaries. The revealed memory contents may be partially observable through diagnostic query statistics output.

A heap out-of-bounds read security issue exists in the query planning component of MongoDB Server. An authenticated user with database read and write privileges can trigger the security issue through crafted query operations, causing the server to read memory beyond allocated buffer boundaries. The revealed memory contents may be partially observable through diagnostic query statistics output.

EPSS

Процентиль: 33%
0.00388
Низкий

5.3 Medium

CVSS4

4.3 Medium

CVSS3

Дефекты

CWE-125

Связанные уязвимости

CVSS3: 8.1
ubuntu
2 месяца назад

A heap out-of-bounds read security issue exists in the query planning component of MongoDB Server. An authenticated user with database read and write privileges can trigger the security issue through crafted query operations, causing the server to read memory beyond allocated buffer boundaries. The revealed memory contents may be partially observable through diagnostic query statistics output.

CVSS3: 8.1
nvd
2 месяца назад

A heap out-of-bounds read security issue exists in the query planning component of MongoDB Server. An authenticated user with database read and write privileges can trigger the security issue through crafted query operations, causing the server to read memory beyond allocated buffer boundaries. The revealed memory contents may be partially observable through diagnostic query statistics output.

CVSS3: 8.1
debian
2 месяца назад

A heap out-of-bounds read security issue exists in the query planning ...

CVSS3: 8.1
redos
8 дней назад

Уязвимость mongodb-org

CVSS3: 8.1
redos
8 дней назад

Уязвимость mongodb-org

EPSS

Процентиль: 33%
0.00388
Низкий

5.3 Medium

CVSS4

4.3 Medium

CVSS3

Дефекты

CWE-125