Skip to content
OpenAdvisories
Medium WID-SEC-2025-2669 4 CVEs

MongoDB: Mehrere Schwachstellen

Published Nov 24, 2025 · Updated Nov 24, 2025 · de-DE

Platform: Linux Platform: Windows

Summary

Ein Angreifer kann mehrere Schwachstellen in MongoDB ausnutzen, um Sicherheitsvorkehrungen zu umgehen, und um einen Denial of Service Angriff durchzuführen.

Product

MongoDB ist ein Open-Source-Dokumentendatenbank.

Vulnerabilities 4

  • Medium 6.5
    CVE-2025-13507

    Time-series operations may cause internal BSON size limit to be exceed

    Inconsistent object size validation in time series processing logic may result in later processing of oversized BSON documents leading to an assert failing and process termination. This issue impacts MongoDB Server v7.0 versions prior to 7.0.26, v8.0 versions…

    MongoDB MongoDB Server
  • Medium 6.5
    CVE-2025-13644

    MongoDB may be susceptible to Invariant Failure due to batched delete

    MongoDB Server may experience an invariant failure during batched delete operations when handling documents. The issue arises when the server mistakenly assumes the presence of multiple documents in a batch based solely on document size exceeding BSONObjMaxSi…

    MongoDB MongoDB Server
  • Medium 4.2
    CVE-2025-12893

    Improper Certificate Validation May Allow Successful TLS Handshaking Despite Invalid Extended Key Usage Fields in MongoDB Server

    Clients may successfully perform a TLS handshake with a MongoDB server despite presenting a client certificate not aligning with the documented Extended Key Usage (EKU) requirements. A certificate that specifies extendedKeyUsage but is missing extendedKeyUsag…

    MongoDB MongoDB Server
  • Low 3.1
    CVE-2025-13643

    MongoDB Server may allow queries to be terminated by unauthorized users

    A user with access to the cluster with a limited set of privilege actions may be able to terminate queries that are being executed by other users. This may cause a denial of service by preventing a fraction of queries from successfully completing. This issue …

    MongoDB MongoDB Server mongodb Ubuntu

Revision history

  1. #1

    Initiale Fassung

References