Skip to content
OpenAdvisories
Medium WID-SEC-2025-1415 4 CVEs

MongoDB: Mehrere Schwachstellen

Published Jun 26, 2025 · Updated Jun 26, 2025 · de-DE

Platform: Linux Platform: Windows

Summary

Ein Angreifer kann mehrere Schwachstellen in MongoDB ausnutzen, um Sicherheitsvorkehrungen zu umgehen, und um einen Denial of Service Angriff durchzuführen.

Product

MongoDB ist ein Open-Source-Dokumentendatenbank.

Vulnerabilities 4

  • High 7.5
    CVE-2025-6709

    Pre-Authentication Denial of Service Vulnerability in MongoDB Server's OIDC Authentication

    The MongoDB Server is susceptible to a denial of service vulnerability due to improper handling of specific date values in JSON input when using OIDC authentication. This can be reproduced using the mongo shell to send a malicious JSON payload leading to an i…

    MongoDB MongoDB Server mongodb Ubuntu
  • High 7.5
    CVE-2025-6710

    Pre-authentication Denial of Service Stack Overflow Vulnerability in JSON Parsing via Excessive Recursion in MongoDB

    MongoDB Server may be susceptible to stack overflow due to JSON parsing mechanism, where specifically crafted JSON inputs may induce unwarranted levels of recursion, resulting in excessive stack space consumption. Such inputs can lead to a stack overflow that…

    MongoDB MongoDB Server mongodb Ubuntu
  • Medium 5.0
    CVE-2025-6706

    Running certain aggregation operations with the SBE engine may lead to unexpected behavior on MongoDB Server

    An authenticated user may trigger a use after free that may result in MongoDB Server crash and other unexpected behavior, even if the user does not have authorization to shut down a server. The crash is triggered on affected versions by issuing an aggregation…

    MongoDB MongoDB Server mongodb Ubuntu
  • Medium 4.2
    CVE-2025-6707

    Race condition in privilege cache invalidation cycle

    Under certain conditions, an authenticated user request may execute with stale privileges following an intentional change by an authorized administrator. This issue affects MongoDB Server v5.0 version prior to 5.0.31, MongoDB Server v6.0 version prior to 6.0.…

    MongoDB MongoDB Server

Revision history

  1. #1

    Initiale Fassung

References