Home
Trends
Vulnerabilities
News
Researchers
Why dbugs?

Jpbronsted

Researcher fromMongoDB
#35242of 53,635
7.5Total CVSS
Vulnerabilities · 1
PT-2024-25457
7.5
2024-05-14
Mongodb · Mongodb Server · CVE-2024-3372
**Name of the Vulnerable Software and Affected Versions** MongoDB Server versions prior to 7.0.6 MongoDB Server versions prior to 6.0.14 MongoDB Server versions prior to 5.0.25 **Description** The issue is caused by improper validation of certain metadata input, which may result in the server not correctly serialising BSON. This can be performed pre-authentication and may cause unexpected application behavior, including unavailability of serverStatus responses. **Recommendations** For MongoDB Server versions prior to 7.0.6, update to version 7.0.6 or later. For MongoDB Server versions prior to 6.0.14, update to version 6.0.14 or later. For MongoDB Server versions prior to 5.0.25, update to version 5.0.25 or later.