Web Application Vulnerabilities Runtime SCA Findings
Looking for the vulnerability index of Invicti's legacy products?
Invicti Enterprise Acunetix Standard & Premium
MongoDb Reachable Assertion Vulnerability - CVE-2025-13644 - Vulnerability Database
MongoDb

MongoDb Reachable Assertion Vulnerability - CVE-2025-13644

High
Reference: CVE-2025-13644
NVD Link: https://nvd.nist.gov/vuln/detail/CVE-2025-13644
Title: MongoDb Reachable Assertion Vulnerability
Overview:

MongoDB Server may experience an invariant failure during batched delete operations when handling documents. The issue arises when the server mistakenly assumes the presence of multiple documents in a batch based solely on document size exceeding BSONObjMaxSize. This issue affects MongoDB Server v7.0 versions prior to 7.0.26 MongoDB Server v8.0 versions prior to 8.0.13 and MongoDB Server v8.1 versions prior to 8.1.2