Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-p2cp-6qqj-8xqc

Опубликовано: 25 нояб. 2025
Источник: github
Github: Не прошло ревью
CVSS4: 2.3
CVSS3: 3.1

Описание

A user with access to the cluster with a limited set of privilege actions may be able to terminate queries that are being executed by other users. This may cause a denial of service by preventing a fraction of queries from successfully completing. This issue affects MongoDB Server v7.0 versions prior to 7.0.26 and MongoDB Server v8.0 versions prior to 8.0.14

A user with access to the cluster with a limited set of privilege actions may be able to terminate queries that are being executed by other users. This may cause a denial of service by preventing a fraction of queries from successfully completing. This issue affects MongoDB Server v7.0 versions prior to 7.0.26 and MongoDB Server v8.0 versions prior to 8.0.14

EPSS

Процентиль: 14%
0.00045
Низкий

2.3 Low

CVSS4

3.1 Low

CVSS3

Дефекты

CWE-862

Связанные уязвимости

CVSS3: 3.1
ubuntu
около 2 месяцев назад

A user with access to the cluster with a limited set of privilege actions may be able to terminate queries that are being executed by other users. This may cause a denial of service by preventing a fraction of queries from successfully completing. This issue affects MongoDB Server v7.0 versions prior to 7.0.26 and MongoDB Server v8.0 versions prior to 8.0.14

CVSS3: 3.1
nvd
около 2 месяцев назад

A user with access to the cluster with a limited set of privilege actions may be able to terminate queries that are being executed by other users. This may cause a denial of service by preventing a fraction of queries from successfully completing. This issue affects MongoDB Server v7.0 versions prior to 7.0.26 and MongoDB Server v8.0 versions prior to 8.0.14

CVSS3: 3.1
debian
около 2 месяцев назад

A user with access to the cluster with a limited set of privilege acti ...

CVSS3: 6.5
fstec
около 2 месяцев назад

Уязвимость сервера системы управления базами данных MongoDB, позволяющая нарушителю вызвать отказ в обслуживании

CVSS3: 3.1
redos
28 дней назад

Уязвимость mongodb-org

EPSS

Процентиль: 14%
0.00045
Низкий

2.3 Low

CVSS4

3.1 Low

CVSS3

Дефекты

CWE-862