Description

A user authorized to perform database queries may trigger denial of service by issuing specially crafted applyOps invocations. This issue affects MongoDB Server v4.0 versions prior to 4.0.10 and MongoDB Server v3.6 versions prior to 3.6.13.

Remediation

References

CVE-2018-20804

Related Vulnerabilities

WordPress Plugin Attachment Manager Arbitrary File Upload (2.1.1)

Plone CMS Use of Externally-Controlled Format String Vulnerability (CVE-2017-5524)

Atlassian Confluence Improper Neutralization of Special Elements in Output Used by a Downstream Component ('Injection') Vulnerability (CVE-2021-39114)

Drupal CVE-2008-4793 Vulnerability (CVE-2008-4793)

Moodle Exposure of Sensitive Information to an Unauthorized Actor Vulnerability (CVE-2015-0211)

Severity

Medium

Classification

CVE-2018-20804 CWE-20 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Tags

Missing Update Known Vulnerabilities