Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-vh87-wfq5-jrqm

Опубликовано: 11 авг. 2026
Источник: github
Github: Не прошло ревью
CVSS4: 5.3
CVSS3: 5.4

Описание

An issue in MongoDB Server could allow an authenticated user with a limited database-scoped role to perform an action against protected system collections that should require more specific privileges. This could result in exposure of collection metadata and, on certain deployment configurations, unauthorized modification of system collection data.

An issue in MongoDB Server could allow an authenticated user with a limited database-scoped role to perform an action against protected system collections that should require more specific privileges. This could result in exposure of collection metadata and, on certain deployment configurations, unauthorized modification of system collection data.

EPSS

Процентиль: 6%
0.00168
Низкий

5.3 Medium

CVSS4

5.4 Medium

CVSS3

Дефекты

CWE-863

Связанные уязвимости

CVSS3: 5.4
ubuntu
около 1 месяца назад

An issue in MongoDB Server could allow an authenticated user with a limited database-scoped role to perform an action against protected system collections that should require more specific privileges. This could result in exposure of collection metadata and, on certain deployment configurations, unauthorized modification of system collection data.

CVSS3: 5.4
nvd
около 1 месяца назад

An issue in MongoDB Server could allow an authenticated user with a limited database-scoped role to perform an action against protected system collections that should require more specific privileges. This could result in exposure of collection metadata and, on certain deployment configurations, unauthorized modification of system collection data.

CVSS3: 5.4
debian
около 1 месяца назад

An issue in MongoDB Server could allow an authenticated user with a li ...

EPSS

Процентиль: 6%
0.00168
Низкий

5.3 Medium

CVSS4

5.4 Medium

CVSS3

Дефекты

CWE-863