Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-x6w8-xx66-6gpm

Опубликовано: 22 июл. 2026
Источник: github
Github: Не прошло ревью
CVSS4: 2.3
CVSS3: 4.2

Описание

An authenticated user holding cursor termination privileges on one database may incorrectly be permitted to terminate active cursors on a separate database, disrupting ongoing query operations for other users. The behavior stems from an authorization check that does not correctly scope privileges to the appropriate namespace.

An authenticated user holding cursor termination privileges on one database may incorrectly be permitted to terminate active cursors on a separate database, disrupting ongoing query operations for other users. The behavior stems from an authorization check that does not correctly scope privileges to the appropriate namespace.

EPSS

Процентиль: 17%
0.00251
Низкий

2.3 Low

CVSS4

4.2 Medium

CVSS3

Дефекты

CWE-863

Связанные уязвимости

CVSS3: 4.3
ubuntu
4 месяца назад

An authenticated user holding cursor termination privileges on one database may incorrectly be permitted to terminate active cursors on a separate database, disrupting ongoing query operations for other users. The behavior stems from an authorization check that does not correctly scope privileges to the appropriate namespace.

CVSS3: 4.3
nvd
4 месяца назад

An authenticated user holding cursor termination privileges on one database may incorrectly be permitted to terminate active cursors on a separate database, disrupting ongoing query operations for other users. The behavior stems from an authorization check that does not correctly scope privileges to the appropriate namespace.

CVSS3: 4.3
debian
4 месяца назад

An authenticated user holding cursor termination privileges on one dat ...

CVSS3: 4.3
redos
4 дня назад

Множественные уязвимости mongodb-org

CVSS3: 4.3
redos
4 дня назад

Множественные уязвимости mongodb-org

EPSS

Процентиль: 17%
0.00251
Низкий

2.3 Low

CVSS4

4.2 Medium

CVSS3

Дефекты

CWE-863