Get a demo
100% Signal 0% Noise Invicti Logo - The Largest Dynamic Application Security Solutions Provider In The World Get a demo
MongoDb Improper Input Validation Vulnerability - CVE-2018-25004 - Vulnerability Database
MongoDb

MongoDb Improper Input Validation Vulnerability - CVE-2018-25004

Medium
Reference: CVE-2018-25004
NVD Link: https://nvd.nist.gov/vuln/detail/CVE-2018-25004
Title: MongoDb Improper Input Validation Vulnerability
Overview:

A user authorized to performing a specific type of query may trigger a denial of service by issuing a generic explain command on a find query. This issue affects MongoDB Server v4.0 versions prior to 4.0.6 and MongoDB Server v3.6 versions prior to 3.6.11.