Поиск уязвимостей
Количество 15
Количество 15
BDU:2025-07725
Уязвимость реализации протокола аутентификации OIDC сервера системы управления базами данных MongoDB, позволяющая нарушителю вызвать отказ в обслуживании
ALT-PU-2025-8810
ALT-PU-2025-8810: package `mongo8.0` update to version 8.0.11-alt1
ROS-20250806-09
Множественные уязвимости mongodb-org
ROS-20250806-08
Множественные уязвимости mongodb-org
CVE-2025-6709
The MongoDB Server is susceptible to a denial of service vulnerability due to improper handling of specific date values in JSON input when using OIDC authentication. This can be reproduced using the mongo shell to send a malicious JSON payload leading to an invariant failure and server crash. This issue affects MongoDB Server v7.0 versions prior to 7.0.17 and MongoDB Server v8.0 versions prior to 8.0.5. The same issue affects MongoDB Server v6.0 versions prior to 6.0.21, but an attacker can only induce denial of service after authenticating.
CVE-2025-6709
The MongoDB Server is susceptible to a denial of service vulnerability due to improper handling of specific date values in JSON input when using OIDC authentication. This can be reproduced using the mongo shell to send a malicious JSON payload leading to an invariant failure and server crash. This issue affects MongoDB Server v7.0 versions prior to 7.0.17 and MongoDB Server v8.0 versions prior to 8.0.5. The same issue affects MongoDB Server v6.0 versions prior to 6.0.21, but an attacker can only induce denial of service after authenticating.
CVE-2025-6709
The MongoDB Server is susceptible to a denial of service vulnerability ...
ALT-PU-2025-5545
ALT-PU-2025-5545: package `mongo6.0` update to version 6.0.21-alt0.p10.1
ALT-PU-2025-5464
ALT-PU-2025-5464: package `mongo8.0` update to version 8.0.6-alt1
ALT-PU-2025-5420
ALT-PU-2025-5420: package `mongo6.0` update to version 6.0.21-alt1
ALT-PU-2025-9809
ALT-PU-2025-9809: package `mongo6.0` update to version 6.0.25-alt0.p10.1
ALT-PU-2025-9742
ALT-PU-2025-9742: package `mongo6.0` update to version 6.0.25-alt1
ALT-PU-2025-9750
ALT-PU-2025-9750: package `mongo7.0` update to version 7.0.22-alt1
ALT-PU-2025-5457
ALT-PU-2025-5457: package `mongo7.0` update to version 7.0.18-alt1
GHSA-5cq2-33xv-h4mm
The MongoDB Server is susceptible to a denial of service vulnerability due to improper handling of specific date values in JSON input when using OIDC authentication. This can be reproduced using the mongo shell to send a malicious JSON payload leading to an invariant failure and server crash. This issue affects MongoDB Server v7.0 versions prior to 7.0.17 and MongoDB Server v8.0 versions prior to 8.0.5. The same issue affects MongoDB Server v6.0 versions prior to 6.0.21, but an attacker can only induce denial of service after authenticating.
Уязвимостей на страницу
Уязвимость | CVSS | EPSS | Опубликовано | |
|---|---|---|---|---|
 | BDU:2025-07725 Уязвимость реализации протокола аутентификации OIDC сервера системы управления базами данных MongoDB, позволяющая нарушителю вызвать отказ в обслуживании | CVSS3: 7.5 | 1% Низкий | больше 1 года назад |
| ALT-PU-2025-8810 ALT-PU-2025-8810: package `mongo8.0` update to version 8.0.11-alt1 | CVSS3: 8.8 | больше 1 года назад | |
 | ROS-20250806-09 Множественные уязвимости mongodb-org | CVSS3: 7.7 | больше 1 года назад | |
| ROS-20250806-08 Множественные уязвимости mongodb-org | CVSS3: 7.7 | больше 1 года назад | |
 | CVE-2025-6709 The MongoDB Server is susceptible to a denial of service vulnerability due to improper handling of specific date values in JSON input when using OIDC authentication. This can be reproduced using the mongo shell to send a malicious JSON payload leading to an invariant failure and server crash. This issue affects MongoDB Server v7.0 versions prior to 7.0.17 and MongoDB Server v8.0 versions prior to 8.0.5. The same issue affects MongoDB Server v6.0 versions prior to 6.0.21, but an attacker can only induce denial of service after authenticating. | CVSS3: 7.5 | 1% Низкий | больше 1 года назад |
 | CVE-2025-6709 The MongoDB Server is susceptible to a denial of service vulnerability due to improper handling of specific date values in JSON input when using OIDC authentication. This can be reproduced using the mongo shell to send a malicious JSON payload leading to an invariant failure and server crash. This issue affects MongoDB Server v7.0 versions prior to 7.0.17 and MongoDB Server v8.0 versions prior to 8.0.5. The same issue affects MongoDB Server v6.0 versions prior to 6.0.21, but an attacker can only induce denial of service after authenticating. | CVSS3: 7.5 | 1% Низкий | больше 1 года назад |
| CVE-2025-6709 The MongoDB Server is susceptible to a denial of service vulnerability ... | CVSS3: 7.5 | 1% Низкий | больше 1 года назад |
| ALT-PU-2025-5545 ALT-PU-2025-5545: package `mongo6.0` update to version 6.0.21-alt0.p10.1 | CVSS3: 9.8 | больше 1 года назад | |
| ALT-PU-2025-5464 ALT-PU-2025-5464: package `mongo8.0` update to version 8.0.6-alt1 | CVSS3: 9.8 | больше 1 года назад | |
| ALT-PU-2025-5420 ALT-PU-2025-5420: package `mongo6.0` update to version 6.0.21-alt1 | CVSS3: 9.8 | больше 1 года назад | |
| ALT-PU-2025-9809 ALT-PU-2025-9809: package `mongo6.0` update to version 6.0.25-alt0.p10.1 | CVSS3: 8.8 | больше 1 года назад | |
| ALT-PU-2025-9742 ALT-PU-2025-9742: package `mongo6.0` update to version 6.0.25-alt1 | CVSS3: 8.8 | больше 1 года назад | |
| ALT-PU-2025-9750 ALT-PU-2025-9750: package `mongo7.0` update to version 7.0.22-alt1 | CVSS3: 8.8 | больше 1 года назад | |
| ALT-PU-2025-5457 ALT-PU-2025-5457: package `mongo7.0` update to version 7.0.18-alt1 | CVSS3: 9.8 | больше 1 года назад | |
| GHSA-5cq2-33xv-h4mm The MongoDB Server is susceptible to a denial of service vulnerability due to improper handling of specific date values in JSON input when using OIDC authentication. This can be reproduced using the mongo shell to send a malicious JSON payload leading to an invariant failure and server crash. This issue affects MongoDB Server v7.0 versions prior to 7.0.17 and MongoDB Server v8.0 versions prior to 8.0.5. The same issue affects MongoDB Server v6.0 versions prior to 6.0.21, but an attacker can only induce denial of service after authenticating. | CVSS3: 7.5 | 1% Низкий | больше 1 года назад |
Уязвимостей на страницу