Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-q9xw-pqvh-974r

Опубликовано: 24 мая 2022
Источник: github
Github: Не прошло ревью
CVSS3: 4.9

Описание

A user authorized to performing a specific type of query may trigger a denial of service by issuing a generic explain command on a find query. This issue affects: MongoDB Inc. MongoDB Server v4.0 versions prior to 4.0.6; MongoDB Server v3.6 versions prior to 3.6.11.

A user authorized to performing a specific type of query may trigger a denial of service by issuing a generic explain command on a find query. This issue affects: MongoDB Inc. MongoDB Server v4.0 versions prior to 4.0.6; MongoDB Server v3.6 versions prior to 3.6.11.

EPSS

Процентиль: 63%
0.00437
Низкий

4.9 Medium

CVSS3

Дефекты

CWE-20

Связанные уязвимости

CVSS3: 4.9
ubuntu
почти 5 лет назад

A user authorized to performing a specific type of query may trigger a denial of service by issuing a generic explain command on a find query. This issue affects MongoDB Server v4.0 versions prior to 4.0.6 and MongoDB Server v3.6 versions prior to 3.6.11.

CVSS3: 4.9
redhat
почти 5 лет назад

A user authorized to performing a specific type of query may trigger a denial of service by issuing a generic explain command on a find query. This issue affects MongoDB Server v4.0 versions prior to 4.0.6 and MongoDB Server v3.6 versions prior to 3.6.11.

CVSS3: 4.9
nvd
почти 5 лет назад

A user authorized to performing a specific type of query may trigger a denial of service by issuing a generic explain command on a find query. This issue affects MongoDB Server v4.0 versions prior to 4.0.6 and MongoDB Server v3.6 versions prior to 3.6.11.

CVSS3: 4.9
debian
почти 5 лет назад

A user authorized to performing a specific type of query may trigger a ...

EPSS

Процентиль: 63%
0.00437
Низкий

4.9 Medium

CVSS3

Дефекты

CWE-20