CNNVD-202507-730 Information
CNNVD ID
CNNVD-202507-730
Related CVE
- CNNVD Published: 2025-07-07
Description (Chinese)
MongoDB Server是美国MongoDB公司的一套开源的NoSQL数据库。该数据库提供面向集合的存储、动态查询、数据复制及自动故障转移等功能。 MongoDB Server v8.1版本存在安全漏洞，该漏洞源于授权用户可执行重复_id字段查询，可能导致崩溃。
Description (English)
MongoDB Server is an open-source NoSQL database for MongoDB in the United States. The database provides a collection-oriented memory, dynamic queries, data replication and automatic downtime transfer. There is a security loophole in version MongoDB Server v. 8.1, which stems from the fact that authorized users can perform duplicate id field queries, which could lead to a breakdown.
Hazard Level
High
Vulnerability Type
其他
Affected Vendor
MongoDB
Published
2025-07-07
Last Modified
2026-02-24
References
https://jira.mongodb.org/browse/SERVER-102693 https://vigilance.fr/vulnerability/MongoDB-Server-denial-of-service-via-Multiple-id-Query-Filter-47622
Patch
https://www.mongodb.com/docs/manual/release-notes/8.0/#std-label-release-notes-8.0
Share on: