Skip to content
OpenAdvisories
High WID-SEC-2025-0680 4 CVEs

MongoDB: Mehrere Schwachstellen

Published Apr 1, 2025 · Updated Apr 1, 2025 · de-DE

Platform: Windows

Summary

Ein entfernter anonymer oder authentisierter Angreifer kann mehrere Schwachstellen in MongoDB ausnutzen, um Informationen preiszugeben, die Authentifizierung zu umgehen und einen Denial-of-Service-Zustand zu verursachen.

Product

MongoDB ist ein Open-Source-Dokumentendatenbank.

Vulnerabilities 4

  • High 8.1
    CVE-2025-3085

    MongoDB Server running on Linux may allow unexpected connections where intermediate certificates are revoked

    A MongoDB server under specific conditions running on Linux with TLS and CRL revocation status checking enabled, fails to check the revocation status of the intermediate certificates in the peer's certificate chain. In cases of MONGODB-X509, which is not enab…

    MongoDB MongoDB Server mongodb Ubuntu
  • High 7.5
    CVE-2025-3083

    Malformed MongoDB wire protocol messages may cause mongos to crash

    Specifically crafted MongoDB wire protocol messages can cause mongos to crash during command validation. This can occur without using an authenticated connection. This issue affects MongoDB v5.0 versions prior to 5.0.31,  MongoDB v6.0 versions prior to 6.0.20…

    MongoDB MongoDB Server mongodb Ubuntu
  • Medium 6.5
    CVE-2025-3084

    MongoDB Server may crash due to improper validation of explain command

    When run on commands with certain arguments set, explain may fail to validate these arguments before using them. This can lead to crashes in router servers. This affects MongoDB Server v5.0 prior to 5.0.31, MongoDB Server v6.0 prior to 6.0.20, MongoDB Server …

    MongoDB MongoDB Server mongodb Ubuntu
  • Low 3.1
    CVE-2025-3082

    User may override a view's collation and gain unauthorized access to underlying data

    A user authorized to access a view may be able to alter the intended collation, allowing them to access to a different or unintended view of underlying data. This issue affects MongoDB Server v5.0 version prior to 5.0.31, MongoDB Server v6.0 version prior to …

    MongoDB MongoDB Server mongodb Ubuntu

Revision history

  1. #1

    Initiale Fassung

References