Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-rg3j-hvqv-ccpr

Опубликовано: 08 сент. 2026
Источник: github
Github: Не прошло ревью
CVSS4: 9.2
CVSS3: 8.1

Описание

Improper handling of case sensitivity in the configuration validation component of MongoDB Server may cause the authorization subsystem to remain in a default disabled state during server startup. An unauthenticated user with network access to a deployment where this condition occurs can perform arbitrary administrative operations, resulting in full impact of data confidentiality, integrity, and availability.

Improper handling of case sensitivity in the configuration validation component of MongoDB Server may cause the authorization subsystem to remain in a default disabled state during server startup. An unauthenticated user with network access to a deployment where this condition occurs can perform arbitrary administrative operations, resulting in full impact of data confidentiality, integrity, and availability.

EPSS

Процентиль: 43%
0.00505
Низкий

9.2 Critical

CVSS4

8.1 High

CVSS3

Дефекты

CWE-178

Связанные уязвимости

CVSS3: 8.1
ubuntu
2 месяца назад

Improper handling of case sensitivity in the configuration validation component of MongoDB Server may cause the authorization subsystem to remain in a default disabled state during server startup. An unauthenticated user with network access to a deployment where this condition occurs can perform arbitrary administrative operations, resulting in full impact of data confidentiality, integrity, and availability.

CVSS3: 8.1
nvd
2 месяца назад

Improper handling of case sensitivity in the configuration validation component of MongoDB Server may cause the authorization subsystem to remain in a default disabled state during server startup. An unauthenticated user with network access to a deployment where this condition occurs can perform arbitrary administrative operations, resulting in full impact of data confidentiality, integrity, and availability.

CVSS3: 8.1
debian
2 месяца назад

Improper handling of case sensitivity in the configuration validation ...

CVSS3: 8.1
redos
8 дней назад

Уязвимость mongodb-org

CVSS3: 8.1
redos
8 дней назад

Уязвимость mongodb-org

EPSS

Процентиль: 43%
0.00505
Низкий

9.2 Critical

CVSS4

8.1 High

CVSS3

Дефекты

CWE-178