Skip to content
OpenAdvisories
Medium · 6.5 CVE-2019-20923 EUVD-2019-11453GHSA-f4mh-7qwc-2533

Crash while handling internal Javascript exception types

Published Nov 23, 2020 · Updated Sep 16, 2024 · Assigned by mongodb

Description

A user authorized to perform database queries may trigger denial of service by issuing specially crafted queries, which throw unhandled Javascript exceptions containing types intended to be scoped to the Javascript engine's internals. This issue affects MongoDB Server v4.0 versions prior to 4.0.7.

Affected products

VendorProductAffectedFixed
MongoDB MongoDB Server 4.0 – < 4.0.7 4.0.7

References