MongoDB 8.1.x < 8.1.1 / 8.2.0 DoS (SERVER-102693)

#%NASL_MIN_LEVEL 80900
##
# (C) Tenable, Inc.
##

include('compat.inc');

if (description)
{
  script_id(242978);
  script_version("1.5");
  script_set_attribute(attribute:"plugin_modification_date", value:"2026/03/13");

  script_cve_id("CVE-2025-7259");
  script_xref(name:"IAVB", value:"2025-B-0124-S");

  script_name(english:"MongoDB 8.1.x < 8.1.1 / 8.2.0 DoS (SERVER-102693)");

  script_set_attribute(attribute:"synopsis", value:
"The remote host is missing a security update.");
  script_set_attribute(attribute:"description", value:
"The version of MongoDB installed on the remote host is 8.1 prior to 8.1.1. It is, therefore, affected by a 
vulnerability as referenced in the SERVER-102693 advisory.

  - An authorized user can issue queries with duplicate _id fields, that leads to unexpected behavior in 
    MongoDB Server, which may result to crash. This issue can only be triggered by authorized users and cause 
    Denial of Service. This issue affects MongoDB Server v8.1 version 8.1.0. (CVE-2025-7259)

  Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version
  number.");
  script_set_attribute(attribute:"see_also", value:"https://jira.mongodb.org/browse/SERVER-102693");
  script_set_attribute(attribute:"solution", value:
"Upgrade to MongoDB version 8.1.1, 8.2.0 or later.");
  script_set_attribute(attribute:"agent", value:"all");
  script_set_cvss_base_vector("CVSS2#AV:N/AC:L/Au:S/C:N/I:N/A:C");
  script_set_cvss3_base_vector("CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H");
  script_set_attribute(attribute:"cvss_score_source", value:"CVE-2025-7259");

  script_set_attribute(attribute:"vuln_publication_date", value:"2025/03/20");
  script_set_attribute(attribute:"patch_publication_date", value:"2025/07/07");
  script_set_attribute(attribute:"plugin_publication_date", value:"2025/07/29");

  script_set_attribute(attribute:"plugin_type", value:"combined");
  script_set_attribute(attribute:"cpe", value:"cpe:/a:mongodb:mongodb");
  script_set_attribute(attribute:"thorough_tests", value:"true");
  script_set_attribute(attribute:"stig_severity", value:"I");
  script_end_attributes();

  script_category(ACT_GATHER_INFO);
  script_family(english:"Databases");

  script_copyright(english:"This script is Copyright (C) 2025-2026 and is owned by Tenable, Inc. or an Affiliate thereof.");

  script_dependencies("mongodb_win_installed.nbin", "mongodb_nix_installed.nbin", "mongodb_macos_installed.nbin", "mongodb_detect.nasl");
  script_require_keys("installed_sw/MongoDB");

  exit(0);
}

include('vdf.inc');

# @tvdl-content
var vuln_data = {
  'metadata': {'spec_version': '1.0'},
  'checks': [
    {
      'product': {'name': 'MongoDB', 'type': 'app'},
      'check_algorithm': 'default',
      'constraints' : [
          { 'min_version' : '8.1', 'fixed_version' : '8.1.1', 'fixed_display' : '8.1.1 / 8.2.0' }
      ]
    }
  ]
};

var vdf_result = vdf::check_and_report(vuln_data:vuln_data, severity:SECURITY_WARNING, check_backporting:TRUE);
vdf::handle_check_and_report_errors(vdf_result:vdf_result);