Lucene search

K
osvGoogleOSV:CVE-2020-7925
HistoryNov 23, 2020 - 3:15 p.m.

CVE-2020-7925

2020-11-2315:15:11
Google
osv.dev
8
mongodb
server
vulnerability
user input
denial of service

AI Score

6.7

Confidence

High

EPSS

0.001

Percentile

47.8%

Incorrect validation of user input in the role name parser may lead to use of uninitialized memory allowing an unauthenticated attacker to use a specially crafted request to cause a denial of service. This issue affects MongoDB Server v4.4 versions prior to 4.4.0-rc12; MongoDB Server v4.2 versions prior to 4.2.9.

AI Score

6.7

Confidence

High

EPSS

0.001

Percentile

47.8%