CVE Vulnerabilities

CVE-2019-20923

Published: Nov 23, 2020 | Modified: Jan 23, 2024
CVSS 3.x
6.5
MEDIUM
Source:
NVD
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
CVSS 2.x
4 MEDIUM
AV:N/AC:L/Au:S/C:N/I:N/A:P
RedHat/V2
RedHat/V3
Ubuntu

A user authorized to perform database queries may trigger denial of service by issuing specially crafted queries, which throw unhandled Javascript exceptions containing types intended to be scoped to the Javascript engines internals. This issue affects MongoDB Server v4.0 versions prior to 4.0.7.

Affected Software

Name Vendor Start Version End Version
Mongodb Mongodb 4.0.0 (including) 4.0.7 (excluding)

References