A user authorized to performing a specific type of query may trigger a denial of service by issuing a generic explain command on a find query. This issue affects MongoDB Server v4.0 versions prior to 4.0.6 and MongoDB Server v3.6 versions prior to 3.6.11.
Metrics
Affected Vendors & Products
References
History
Tue, 17 Sep 2024 00:45:00 +0000
Type | Values Removed | Values Added |
---|---|---|
Description | A user authorized to performing a specific type of query may trigger a denial of service by issuing a generic explain command on a find query. This issue affects MongoDB Server v4.0 versions prior to 4.0.6 and MongoDB Server v3.6 versions prior to 3.6.11. | A user authorized to performing a specific type of query may trigger a denial of service by issuing a generic explain command on a find query. This issue affects MongoDB Server v4.0 versions prior to 4.0.6 and MongoDB Server v3.6 versions prior to 3.6.11. |
MITRE
Status: PUBLISHED
Assigner: mongodb
Published: 2021-03-01T16:15:14.484681Z
Updated: 2024-09-17T00:31:55.614Z
Reserved: 2021-01-29T00:00:00
Link: CVE-2018-25004
Vulnrichment
No data.
NVD
Status : Modified
Published: 2021-03-01T17:15:11.717
Modified: 2024-09-17T01:15:37.957
Link: CVE-2018-25004
Redhat