A user authorized to access a view may be able to alter the intended collation, allowing them to access to a different or unintended view of underlying data. This issue affects MongoDB Server v5.0 version prior to 5.0.31, MongoDB Server v6.0 version prior to 6.0.20, MongoDB Server v7.0 version prior to 7.0.14 and MongoDB Server v7.3 versions prior to 7.3.4.
Fixes

Solution

No solution given by the vendor.


Workaround

No workaround given by the vendor.

History

Mon, 22 Sep 2025 16:45:00 +0000

Type Values Removed Values Added
Weaknesses NVD-CWE-noinfo
CPEs cpe:2.3:a:mongodb:mongodb:*:*:*:*:*:*:*:*

Tue, 01 Apr 2025 16:15:00 +0000

Type Values Removed Values Added
Metrics ssvc

{'options': {'Automatable': 'no', 'Exploitation': 'none', 'Technical Impact': 'partial'}, 'version': '2.0.3'}


Tue, 01 Apr 2025 11:15:00 +0000

Type Values Removed Values Added
Description A user authorized to access a view may be able to alter the intended collation, allowing them to access to a different or unintended view of underlying data. This issue affects MongoDB Server v5.0 version prior to 5.0.31, MongoDB Server v6.0 version prior to 6.0.20, MongoDB Server v7.0 version prior to 7.0.14 and MongoDB Server v7.3 versions prior to 7.3.4.
Title User may override a view's collation and gain unauthorized access to underlying data
First Time appeared Mongodb
Mongodb mongodb
Weaknesses CWE-284
CPEs cpe:2.3:a:mongodb:mongodb:5.0.0:*:*:*:*:*:*:*
cpe:2.3:a:mongodb:mongodb:5.0.10:*:*:*:*:*:*:*
cpe:2.3:a:mongodb:mongodb:5.0.11:*:*:*:*:*:*:*
cpe:2.3:a:mongodb:mongodb:5.0.12:*:*:*:*:*:*:*
cpe:2.3:a:mongodb:mongodb:5.0.13:*:*:*:*:*:*:*
cpe:2.3:a:mongodb:mongodb:5.0.14:*:*:*:*:*:*:*
cpe:2.3:a:mongodb:mongodb:5.0.15:*:*:*:*:*:*:*
cpe:2.3:a:mongodb:mongodb:5.0.16:*:*:*:*:*:*:*
cpe:2.3:a:mongodb:mongodb:5.0.17:*:*:*:*:*:*:*
cpe:2.3:a:mongodb:mongodb:5.0.18:*:*:*:*:*:*:*
cpe:2.3:a:mongodb:mongodb:5.0.19:*:*:*:*:*:*:*
cpe:2.3:a:mongodb:mongodb:5.0.1:*:*:*:*:*:*:*
cpe:2.3:a:mongodb:mongodb:5.0.20:*:*:*:*:*:*:*
cpe:2.3:a:mongodb:mongodb:5.0.21:*:*:*:*:*:*:*
cpe:2.3:a:mongodb:mongodb:5.0.22:*:*:*:*:*:*:*
cpe:2.3:a:mongodb:mongodb:5.0.23:*:*:*:*:*:*:*
cpe:2.3:a:mongodb:mongodb:5.0.24:*:*:*:*:*:*:*
cpe:2.3:a:mongodb:mongodb:5.0.25:*:*:*:*:*:*:*
cpe:2.3:a:mongodb:mongodb:5.0.26:*:*:*:*:*:*:*
cpe:2.3:a:mongodb:mongodb:5.0.27:*:*:*:*:*:*:*
cpe:2.3:a:mongodb:mongodb:5.0.28:*:*:*:*:*:*:*
cpe:2.3:a:mongodb:mongodb:5.0.29:*:*:*:*:*:*:*
cpe:2.3:a:mongodb:mongodb:5.0.2:*:*:*:*:*:*:*
cpe:2.3:a:mongodb:mongodb:5.0.30:*:*:*:*:*:*:*
cpe:2.3:a:mongodb:mongodb:5.0.3:*:*:*:*:*:*:*
cpe:2.3:a:mongodb:mongodb:5.0.4:*:*:*:*:*:*:*
cpe:2.3:a:mongodb:mongodb:5.0.5:*:*:*:*:*:*:*
cpe:2.3:a:mongodb:mongodb:5.0.6:*:*:*:*:*:*:*
cpe:2.3:a:mongodb:mongodb:5.0.7:*:*:*:*:*:*:*
cpe:2.3:a:mongodb:mongodb:5.0.8:*:*:*:*:*:*:*
cpe:2.3:a:mongodb:mongodb:5.0.9:*:*:*:*:*:*:*
cpe:2.3:a:mongodb:mongodb:6.0.0:*:*:*:*:*:*:*
cpe:2.3:a:mongodb:mongodb:6.0.10:*:*:*:*:*:*:*
cpe:2.3:a:mongodb:mongodb:6.0.11:*:*:*:*:*:*:*
cpe:2.3:a:mongodb:mongodb:6.0.12:*:*:*:*:*:*:*
cpe:2.3:a:mongodb:mongodb:6.0.13:*:*:*:*:*:*:*
cpe:2.3:a:mongodb:mongodb:6.0.14:*:*:*:*:*:*:*
cpe:2.3:a:mongodb:mongodb:6.0.15:*:*:*:*:*:*:*
cpe:2.3:a:mongodb:mongodb:6.0.16:*:*:*:*:*:*:*
cpe:2.3:a:mongodb:mongodb:6.0.17:*:*:*:*:*:*:*
cpe:2.3:a:mongodb:mongodb:6.0.18:*:*:*:*:*:*:*
cpe:2.3:a:mongodb:mongodb:6.0.19:*:*:*:*:*:*:*
cpe:2.3:a:mongodb:mongodb:6.0.1:*:*:*:*:*:*:*
cpe:2.3:a:mongodb:mongodb:6.0.2:*:*:*:*:*:*:*
cpe:2.3:a:mongodb:mongodb:6.0.3:*:*:*:*:*:*:*
cpe:2.3:a:mongodb:mongodb:6.0.4:*:*:*:*:*:*:*
cpe:2.3:a:mongodb:mongodb:6.0.5:*:*:*:*:*:*:*
cpe:2.3:a:mongodb:mongodb:6.0.6:*:*:*:*:*:*:*
cpe:2.3:a:mongodb:mongodb:6.0.7:*:*:*:*:*:*:*
cpe:2.3:a:mongodb:mongodb:6.0.8:*:*:*:*:*:*:*
cpe:2.3:a:mongodb:mongodb:6.0.9:*:*:*:*:*:*:*
cpe:2.3:a:mongodb:mongodb:7.0.0:*:*:*:*:*:*:*
cpe:2.3:a:mongodb:mongodb:7.0.10:*:*:*:*:*:*:*
cpe:2.3:a:mongodb:mongodb:7.0.11:*:*:*:*:*:*:*
cpe:2.3:a:mongodb:mongodb:7.0.12:*:*:*:*:*:*:*
cpe:2.3:a:mongodb:mongodb:7.0.13:*:*:*:*:*:*:*
cpe:2.3:a:mongodb:mongodb:7.0.1:*:*:*:*:*:*:*
cpe:2.3:a:mongodb:mongodb:7.0.2:*:*:*:*:*:*:*
cpe:2.3:a:mongodb:mongodb:7.0.3:*:*:*:*:*:*:*
cpe:2.3:a:mongodb:mongodb:7.0.4:*:*:*:*:*:*:*
cpe:2.3:a:mongodb:mongodb:7.0.5:*:*:*:*:*:*:*
cpe:2.3:a:mongodb:mongodb:7.0.6:*:*:*:*:*:*:*
cpe:2.3:a:mongodb:mongodb:7.0.7:*:*:*:*:*:*:*
cpe:2.3:a:mongodb:mongodb:7.0.8:*:*:*:*:*:*:*
cpe:2.3:a:mongodb:mongodb:7.0.9:*:*:*:*:*:*:*
cpe:2.3:a:mongodb:mongodb:7.3.0:*:*:*:*:*:*:*
cpe:2.3:a:mongodb:mongodb:7.3.1:*:*:*:*:*:*:*
cpe:2.3:a:mongodb:mongodb:7.3.2:*:*:*:*:*:*:*
cpe:2.3:a:mongodb:mongodb:7.3.3:*:*:*:*:*:*:*
Vendors & Products Mongodb
Mongodb mongodb
References
Metrics cvssV3_1

{'score': 3.1, 'vector': 'CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:N/A:N'}


cve-icon MITRE

Status: PUBLISHED

Assigner: mongodb

Published:

Updated: 2025-04-01T15:14:39.348Z

Reserved: 2025-04-01T08:47:40.658Z

Link: CVE-2025-3082

cve-icon Vulnrichment

Updated: 2025-04-01T15:14:35.202Z

cve-icon NVD

Status : Analyzed

Published: 2025-04-01T11:15:39.517

Modified: 2025-09-22T14:20:22.647

Link: CVE-2025-3082

cve-icon Redhat

No data.

cve-icon OpenCVE Enrichment

No data.