Web Application Vulnerabilities Runtime SCA Findings
Looking for the vulnerability index of Invicti's legacy products?
Invicti Enterprise Acunetix Standard & Premium
MongoDb Improper Authorization Vulnerability - CVE-2025-6713 - Vulnerability Database
MongoDb

MongoDb Improper Authorization Vulnerability - CVE-2025-6713

Medium
Reference: CVE-2025-6713
NVD Link: https://nvd.nist.gov/vuln/detail/CVE-2025-6713
Title: MongoDb Improper Authorization Vulnerability
Overview:

An unauthorized user may leverage a specially crafted aggregation pipeline to access data without proper authorization due to improper handling of the mergeCursors stage in MongoDB Server. This may lead to access to data without further authorisation. This issue affects MongoDB Server MongoDB Server v8.0 versions prior to 8.0.7 MongoDB Server v7.0 versions prior to 7.0.19 and MongoDB Server v6.0 versions prior to 6.0.22