BIT-mongodb-2025-3084

vendorUSosv

MongoDB Server may crash due to improper validation of explain command

view advisory published 2025-09-25Licence: per source

When run on commands with certain arguments set, explain may fail to validate these arguments before using them. This can lead to crashes in router servers. This affects MongoDB Server v5.0 prior to 5.0.31, MongoDB Server v6.0 prior to 6.0.20, MongoDB Server v7.0 prior to 7.0.16 and MongoDB Server v8.0 prior to 8.0.4

describes (1)

Related CVEs.

ID	severity	EPSS	exploitable	published
CVE-2025-3084US	—	0.40% (34th)	—	2025-04-01
When run on commands with certain arguments set, explain may fail to validate these arguments before using them. This can lead to crashes in router servers. This affects MongoDB Se…

references

External citations — patches, advisories, analysis.

https://jira.mongodb.org/browse/SERVER-103153ADVISORY
https://nvd.nist.gov/vuln/detail/CVE-2025-3084WEB

scry

Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.

Free scan