CVE-2024-8305 MongoDB Server secondaries may crash due to forced index constraints

🗓️ 21 Oct 2024 14:10:31Reported by GoogleType

osv

osv🔗 osv.dev👁 18 Views

Unique index enforcement issue in MongoDB Server versions prior to 6.0.17, 7.0.13, and 7.3.

Reporter	Title	Published	Views	Family All 21
ibm	Security Bulletin: Vulnerabilities in MongoDB, Python, Node.js, Golang Go, Linux kernel affect IBM Spectrum Protect Plus	10 Mar 202620:52	–	ibm
bdu_fstec	The vulnerability of the MongoDB database management system, related to improper validation of consistency in input data, allows a attacker to cause service failures.	3 Mar 202500:00	–	bdu_fstec
circl	CVE-2024-8305	21 Oct 202417:41	–	circl
cnnvd	MongoDB Server 安全漏洞	21 Oct 202400:00	–	cnnvd
cve	CVE-2024-8305	21 Oct 202414:10	–	cve
cvelist	CVE-2024-8305 MongoDB Server secondaries may crash due to forced index constraints	21 Oct 202414:10	–	cvelist
euvd	EUVD-2024-49079	3 Oct 202520:07	–	euvd
nessus	IBM Spectrum Protect Plus Web UI 10.1.0 < 10.1.17.1 (7237702)	25 Jun 202500:00	–	nessus
nessus	MongoDB 6.0.x < 6.0.17 / 7.0.x < 7.0.13 / 7.3.x < 7.3.4 incorrect enforcement of index constraints (SERVER-92382)	24 Oct 202400:00	–	nessus
nessus	MongoDB 6.0.x < 6.0.17 / 7.0.x < 7.0.13 / 7.3.x < 7.3.4 incorrect enforcement of index constraints (SERVER-92382)	19 Mar 202500:00	–	nessus

Source	Link
jira	www.jira.mongodb.org/browse/SERVER-92382
github	www.github.com/CVEProject/cvelistV5/tree/main/cves/2024/8xxx/CVE-2024-8305.json
nvd	www.nvd.nist.gov/vuln/detail/CVE-2024-8305

15 Jul 2026 02:13Current

6.8Medium risk

Vulners AI Score6.8

CVSS 3.16.5

EPSS0.0057

mongodb unique index enforcement issue software cve-2024-8305