CVE-2018-25004 – A user authorized to performing a specific type of query may trigger a denial of service b …

Vuln ID: CVE-2018-25004

Published:  2021-03-01  17:15:11Z

Description: A user authorized to performing a specific type of query may trigger a denial of service by issuing a generic explain command on a find query. This issue affects: MongoDB Inc. MongoDB Server v4.0 versions prior to 4.0.6; MongoDB Server v3.6 versions prior to 3.6.11.

Source: NVD.NIST.GOV

 

Date:

Categorie(s):

Tag(s):