Skip to content
OpenAdvisories
Medium WID-SEC-2025-1482 5 CVEs

MongoDB: Mehrere Schwachstellen

Published Jul 7, 2025 · Updated Jul 7, 2025 · de-DE

Platform: Linux Platform: Windows

Summary

Ein Angreifer kann mehrere Schwachstellen in MongoDB ausnutzen, um Informationen offenzulegen, um einen Denial of Service Angriff durchzuführen, und um Sicherheitsvorkehrungen zu umgehen.

Product

MongoDB ist ein Open-Source-Dokumentendatenbank.

Vulnerabilities 5

  • High 7.7
    CVE-2025-6713 Public exploit

    MongoDB Server may be susceptible to privilege escalation due to $mergeCursors stage

    An unauthorized user may leverage a specially crafted aggregation pipeline to access data without proper authorization due to improper handling of the $mergeCursors stage in MongoDB Server. This may lead to access to data without further authorisation. This i…

    MongoDB MongoDB Server mongodb Ubuntu
  • High 7.5
    CVE-2025-6714

    Incorrect Handling of incomplete data may prevent mongoS from Accepting New Connections

    MongoDB Server's mongos component can become unresponsive to new connections due to incorrect handling of incomplete data. This affects MongoDB when configured with load balancer support. This issue affects MongoDB Server v6.0 prior to 6.0.23, MongoDB Server …

    MongoDB MongoDB Server mongodb Ubuntu
  • Medium 6.5
    CVE-2025-6712

    MongoDB Server may be susceptible to DoS due to Accumulated Memory Allocation

    MongoDB Server may be susceptible to disruption caused by high memory usage, potentially leading to server crash. This condition is linked to inefficiencies in memory management related to internal operations. In scenarios where certain internal processes per…

    MongoDB MongoDB Server mongodb Ubuntu
  • Medium 6.5
    CVE-2025-7259

    Certain Queries with Duplicate _id Fields May Cause MongoDB Server to Crash

    An authorized user can issue queries with duplicate _id fields, that leads to unexpected behavior in MongoDB Server, which may result to crash. This issue can only be triggered by authorized users and cause Denial of Service. This issue affects MongoDB Server…

    MongoDB MongoDB Server mongodb Ubuntu
  • Medium 4.4
    CVE-2025-6711

    Incomplete Redaction of Sensitive Information in MongoDB Server Logs

    An issue has been identified in MongoDB Server where unredacted queries may inadvertently appear in server logs when certain error conditions are encountered. This issue affects MongoDB Server v8.0 versions prior to 8.0.5, MongoDB Server v7.0 versions prior t…

    MongoDB MongoDB Server mongodb Ubuntu

Revision history

  1. #1

    Initiale Fassung

References