Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

nvd логотип

CVE-2018-20804

Опубликовано: 23 нояб. 2020
Источник: nvd
CVSS3: 6.5
CVSS2: 4
EPSS Низкий

Описание

A user authorized to perform database queries may trigger denial of service by issuing specially crafted applyOps invocations. This issue affects MongoDB Server v4.0 versions prior to 4.0.10 and MongoDB Server v3.6 versions prior to 3.6.13.

Ссылки

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:a:mongodb:mongodb:*:*:*:*:*:*:*:*
Версия от 3.6.0 (включая) до 3.6.13 (исключая)
cpe:2.3:a:mongodb:mongodb:*:*:*:*:*:*:*:*
Версия от 4.0.0 (включая) до 4.0.10 (исключая)

EPSS

Процентиль: 62%
0.00426
Низкий

6.5 Medium

CVSS3

4 Medium

CVSS2

Дефекты

CWE-20
CWE-20

Связанные уязвимости

ubuntu логотип

CVE-2018-20804

CVSS3: 6.5
ubuntu
около 5 лет назад

A user authorized to perform database queries may trigger denial of service by issuing specially crafted applyOps invocations. This issue affects MongoDB Server v4.0 versions prior to 4.0.10 and MongoDB Server v3.6 versions prior to 3.6.13.

redhat логотип

CVE-2018-20804

CVSS3: 6.5
redhat
около 5 лет назад

A user authorized to perform database queries may trigger denial of service by issuing specially crafted applyOps invocations. This issue affects MongoDB Server v4.0 versions prior to 4.0.10 and MongoDB Server v3.6 versions prior to 3.6.13.

debian логотип

CVE-2018-20804

CVSS3: 6.5
debian
около 5 лет назад

A user authorized to perform database queries may trigger denial of se ...

github логотип

GHSA-2mp4-qw33-xj6q

CVSS3: 6.5
github
больше 3 лет назад

A user authorized to perform database queries may trigger denial of service by issuing specially crafted applyOps invocations. This issue affects: MongoDB Inc. MongoDB Server v4.0 versions prior to 4.0.10; v3.6 versions prior to 3.6.13.

EPSS

Процентиль: 62%
0.00426
Низкий

6.5 Medium

CVSS3

4 Medium

CVSS2

Дефекты

CWE-20
CWE-20