Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
Improper neutralization of null bytes may lead to buffer over-reads in MongoDB Server
Vulnerability Description
An authorized user may trigger crashes or receive the contents of buffer over-reads of Server memory by issuing specially crafted requests that construct malformed BSON in the MongoDB Server. This issue affects MongoDB Server v5.0 versions prior to 5.0.30 , MongoDB Server v6.0 versions prior to 6.0.19, MongoDB Server v7.0 versions prior to 7.0.15 and MongoDB Server v8.0 versions prior to and including 8.0.2.
CVSS Information
CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:H
Vulnerability Type
空字节或NULL字符转义处理不恰当
Vulnerability Title
MongoDB 安全漏洞
Vulnerability Description
MongoDB是美国MongoDB公司的一种面向文档的数据库管理系统。 MongoDB存在安全漏洞，该漏洞源于授权用户可能会通过发出的特制请求来触发崩溃或接收服务器内存缓冲区过度读取的内容。
CVSS Information
N/A
Vulnerability Type
N/A