BIT-mongodb-2020-7929

vendorUSosv

Specially crafted regex query can cause DoS

view advisory published 2024-03-06Licence: per source

A user authorized to perform database queries may trigger denial of service by issuing specially crafted query contain a type of regex. This issue affects MongoDB Server v3.6 versions prior to 3.6.21 and MongoDB Server v4.0 versions prior to 4.0.20.

describes (1)

Related CVEs.

ID	severity	EPSS	exploitable	published
CVE-2020-7929US	medium6.5	1.30% (70th)	—	2021-03-01
A user authorized to perform database queries may trigger denial of service by issuing specially crafted query contain a type of regex. This issue affects MongoDB Server v3.6 versi…

references

External citations — patches, advisories, analysis.

https://jira.mongodb.org/browse/SERVER-51083ADVISORY
https://nvd.nist.gov/vuln/detail/CVE-2020-7929WEB

scry

Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.

Free scan