BIT-mongodb-2020-7926

vendorUSosv

Specific query can cause a DoS against MongoDB Server

view advisory published 2024-03-06Licence: per source

A user authorized to perform database queries may cause denial of service by issuing a specially crafted query which violates an invariant in the server selection subsystem. This issue affects MongoDB Server v4.4 versions prior to 4.4.1. Versions before 4.4 are not affected.

describes (1)

Related CVEs.

ID	severity	EPSS	exploitable	published
CVE-2020-7926US	medium6.5	1.41% (73rd)	—	2020-11-23
A user authorized to perform database queries may cause denial of service by issuing a specially crafted query which violates an invariant in the server selection subsystem. This i…

references

External citations — patches, advisories, analysis.

https://jira.mongodb.org/browse/SERVER-50170ADVISORY
https://nvd.nist.gov/vuln/detail/CVE-2020-7926WEB

scry

Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.

Free scan