Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-p5gh-5wmf-x9p2

Опубликовано: 08 сент. 2026
Источник: github
Github: Не прошло ревью
CVSS4: 7.1
CVSS3: 6.5

Описание

The $regexFindAll expression can be used by an authenticated user who can run aggregation pipeline stages to crash a MongoDB server (mongod). Under certain specific conditions the  regex match can start in the middle of a multi-code-unit character, triggering an assertion during query execution.

The $regexFindAll expression can be used by an authenticated user who can run aggregation pipeline stages to crash a MongoDB server (mongod). Under certain specific conditions the  regex match can start in the middle of a multi-code-unit character, triggering an assertion during query execution.

EPSS

Процентиль: 43%
0.00497
Низкий

7.1 High

CVSS4

6.5 Medium

CVSS3

Дефекты

CWE-617

Связанные уязвимости

CVSS3: 6.5
ubuntu
2 месяца назад

The $regexFindAll expression can be used by an authenticated user who can run aggregation pipeline stages to crash a MongoDB server (mongod). Under certain specific conditions the  regex match can start in the middle of a multi-code-unit character, triggering an assertion during query execution.

CVSS3: 6.5
nvd
2 месяца назад

The $regexFindAll expression can be used by an authenticated user who can run aggregation pipeline stages to crash a MongoDB server (mongod). Under certain specific conditions the  regex match can start in the middle of a multi-code-unit character, triggering an assertion during query execution.

CVSS3: 6.5
debian
2 месяца назад

The $regexFindAll expression can be used by an authenticated user who ...

CVSS3: 6.5
redos
4 дня назад

Уязвимость mongodb-org

CVSS3: 6.5
redos
4 дня назад

Уязвимость mongodb-org

EPSS

Процентиль: 43%
0.00497
Низкий

7.1 High

CVSS4

6.5 Medium

CVSS3

Дефекты

CWE-617