mongodb vulnerabilities (Bitnami)
161 vulnerabilities.
mongodbBitnamiServer crash via aggregation pipeline expression with compound wildcard index specification7.1 HighmongodbBitnamiA user with read access can cause a DoS by executing a specifically crafted query to consume a large amount of RAM7.1 HighmongodbBitnamiAuthorization Bypass via Client-Supplied $search.mergingPipeline Leaks Unauthorized Collection Data Through $$SEARCH_META6.0 MediummongodbBitnamiTransaction Command Insufficient Input Validation Leading to Process Termination7.1 HighmongodbBitnamiImproper Validation of Client-Supplied Command Parameters Allowing Role-Based Access Control Bypass8.6 HighmongodbBitnamiFind command with $meta sort can lead to crash7.1 HighmongodbBitnami$graphLookup Aggregation Stage Authorization Check Inconsistency Allowing Unauthorized Collection Access7.1 HighmongodbBitnamiImproper Access Control Allowing Cross-User Session Metadata Disclosure in $listSessions Aggregation Stage5.3 MediummongodbBitnamiMongoDB mongos Improper Validation of Internal Flags in Queryable Encryption Write Commands on Sharded Clusters7.1 HighmongodbBitnamilibmongocrypt Improper Input Validation Leading to Process Termination5.3 MediummongodbBitnamiMongoDB $jsonSchema Query Operator Excessive CPU Consumption Leading to Denial of Service7.1 HighmongodbBitnamiMongoDB $linearFill Window Function Improper Input Validation Leading to Process Termination7.1 HighmongodbBitnamiServer-Side JavaScript DBPointer BSON Serialization Memory Disclosure7.1 HighmongodbBitnamitlsCATrusts Role Restriction Not Enforced via PROXY Protocol v2 on Unix Domain Socket7.2 HighmongodbBitnamiMongoDB mongos Improper Authorization Check in Cursor Termination Allowing Cross-Database Privilege Misuse2.3 LowmongodbBitnamiQueryable Encryption FLE2 Find Payload Missing Input Validation Leading to Resource Exhaustion7.1 HighmongodbBitnamiImproper Validation of OCSP Response During Outbound TLS Handshake Leading to Process Termination6.0 MediummongodbBitnamiServer-Side JavaScript Aggregation Expression Memory Safety Issue Leading to Process Termination7.1 HighmongodbBitnamiMongoDB Improper Input Validation in Compute Mode External Data Processing Leading to Memory Corruption9.2 CriticalmongodbBitnamiMongoDB Aggregation Command Invariant Assertion Failure Leading to Process Termination5.3 MediummongodbBitnamiAwaitable Hello Command in Exhaust Mode Unthrottled Response Loop Leading to Denial of Service6.9 MediummongodbBitnami$rankFusion and $scoreFusion Unbounded Memory Allocation During Error Suggestion Generation7.1 HighmongodbBitnamiAggregation Framework Memory Exhaustion Leading to Process Termination7.1 HighmongodbBitnamiOut-of-Bounds Heap Read in BSON CodeWScope Element Parsing via Malformed BSONColumn Data7.1 HighmongodbBitnamiLocal File Disclosure in MongoDB Server via MozJS Scripting Engine Module Loader6.3 MediummongodbBitnamiPost-authentication use-after-free in server-side JavaScript BSON-to-array conversion8.7 HighmongodbBitnamiUnbounded recursion in BSONColumn interleaved-reference causes pre-auth stack overflow8.7 HighmongodbBitnamiKeyfile contents are in MongoDB Server logs6.8 MediummongodbBitnamiStack memory disclosure in filemd5 command7.1 HighmongodbBitnamiServer crash via malformed binary diff passed to $_internalApplyOplogUpdate.7.2 HighmongodbBitnamiGeometryCollection with strict-winding polygon causes server crash during 2dsphere index key generation7.1 HighmongodbBitnamiSensitive data could be written to mongod.log6.8 MediummongodbBitnamiMetadata name collision on $-prefixed fields causes post-auth server crash7.1 HighmongodbBitnamiUsing MaxKey() may crash the server7.1 HighmongodbBitnami$_internalConvertBucketIndexStats may crash the mongod server when working on no timeseries input7.1 HighmongodbBitnamiCrafted cross-shard merge aggregation crashes MongoDB Server7.1 HighmongodbBitnamiServer crashes in case of the use of exchange7.1 HighmongodbBitnamiAggregation sub-pipeline null dereference may allow DoS via crafted getMore7.1 HighmongodbBitnamiAuthenticate command with specific mechanism parameter can trigger server crash8.2 HighmongodbBitnamiClient side encryption fails to encrypt values in a $vectorSearch7.1 HighmongodbBitnamiCalling createIndex with certain index types can crash mongod7.1 HighmongodbBitnamiPost-authentication CPU utilization DoS via $trim/$ltrim/$rtrim operators5.3 MediummongodbBitnamiPost-authentication use-after-free error in $_internalJsEmit and mapreduce commands7.7 HighmongodbBitnamiUse-After-Free in MongoDB FLE Query Analysis When Processing Positional Projections on Encrypted Fields6.1 MediummongodbBitnamiSchema validation log messages may not redact user data4.8 MediummongodbBitnamiPost-auth memory exhaustion via bitwise match expressions7.1 HighmongodbBitnamiFlatBSON Duplicate Field Index Drift8.7 HighmongodbBitnamiPost-auth null pointer dereference when aggregating against a view with empty search pipeline7.1 HighmongodbBitnamiFlaw in the updateUser Command May Allow Unauthorized Configuration Change5.3 MediummongodbBitnamiMD5 checksum creation may cause availability loss7.1 High- Show moreLoading…