Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

nvd логотип

CVE-2022-24272

Опубликовано: 21 апр. 2022
Источник: nvd
CVSS3: 6.5
CVSS2: 4
EPSS Низкий

Описание

An authenticated user may trigger an invariant assertion during command dispatch due to incorrect validation on the $external database. This may result in mongod denial of service or server crash. This issue affects: MongoDB Inc. MongoDB Server v5.0 versions, prior to and including v5.0.6.

Ссылки

Уязвимые конфигурации

Конфигурация 1
cpe:2.3:a:mongodb:mongodb:*:*:*:*:*:*:*:*
Версия от 5.0.0 (включая) до 5.0.6 (включая)

EPSS

Процентиль: 63%
0.00458
Низкий

6.5 Medium

CVSS3

4 Medium

CVSS2

Дефекты

CWE-617
CWE-617

Связанные уязвимости

CVSS3: 6.5
ubuntu
почти 4 года назад

An authenticated user may trigger an invariant assertion during command dispatch due to incorrect validation on the $external database. This may result in mongod denial of service or server crash. This issue affects: MongoDB Inc. MongoDB Server v5.0 versions, prior to and including v5.0.6.

CVSS3: 6.5
redhat
почти 4 года назад

An authenticated user may trigger an invariant assertion during command dispatch due to incorrect validation on the $external database. This may result in mongod denial of service or server crash. This issue affects: MongoDB Inc. MongoDB Server v5.0 versions, prior to and including v5.0.6.

CVSS3: 6.5
debian
почти 4 года назад

An authenticated user may trigger an invariant assertion during comman ...

CVSS3: 6.5
github
почти 4 года назад

An authenticated user may trigger an invariant assertion during command dispatch due to incorrect validation on the $external database. This may result in mongod denial of service or server crash. This issue affects: MongoDB Inc. MongoDB Server v5.0 versions, prior to and including v5.0.6.

EPSS

Процентиль: 63%
0.00458
Низкий

6.5 Medium

CVSS3

4 Medium

CVSS2

Дефекты

CWE-617
CWE-617