CVE-2022-24272
published 2022-04-21CVE-2022-24272: An authenticated user may trigger an invariant assertion during command dispatch due to incorrect validation on the $external database. This may result in…
PriorityP432medium6.5CVSS 3.1
AVNACLPRLUINSUCNINAH
EPSS
0.84%
53.2th percentile
An authenticated user may trigger an invariant assertion during command dispatch due to incorrect validation on the $external database. This may result in mongod denial of service or server crash. This issue affects: MongoDB Inc. MongoDB Server v5.0 versions, prior to and including v5.0.6.
Affected
2 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| mongodb | mongodb | 5.0.0 – 5.0.6 | — |
| mongodb_inc | mongodb_server | 5.0 – 5.0.6 | — |
CVSS provenance
nvdv3.16.5MEDIUMCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
nvdv2.04.0MEDIUMAV:N/AC:L/Au:S/C:N/I:N/A:P
osv6.5MEDIUM
vendor_redhat6.5MEDIUM
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
Red Hat
mongodb: authenticated user may trigger an invariant assertion during command dispatch due to incorrect validation on the $external database
vendor_redhat·2022-04-21·CVSS 6.5
CVE-2022-24272 [MEDIUM] CWE-617 mongodb: authenticated user may trigger an invariant assertion during command dispatch due to incorrect validation on the $external database
mongodb: authenticated user may trigger an invariant assertion during command dispatch due to incorrect validation on the $external database
An authenticated user may trigger an invariant assertion during command dispatch due to incorrect validation on the $external database. This may result in mongod denial of service or server crash. This issue affects: MongoDB Inc. MongoDB Server v5.0 versions, prior to and including v5.0.6.
A flaw was found in the MongoDB database when requesting unexpected queries due to incorrect validation on the $external database. This flaw allows an attacker to cause a denial of service on the database or a server crash.
Package: ocs4/mcg-core-rhel8 (Red Hat Openshift Container Storage 4) - Out of support scope
Package: noobaa-core-container (Red Hat Openshif
GHSA
GHSA-pg6q-x7mh-7cg2: An authenticated user may trigger an invariant assertion during command dispatch due to incorrect validation on the $external database
ghsa_unreviewed·2022-04-22
CVE-2022-24272 [MEDIUM] CWE-617 GHSA-pg6q-x7mh-7cg2: An authenticated user may trigger an invariant assertion during command dispatch due to incorrect validation on the $external database
An authenticated user may trigger an invariant assertion during command dispatch due to incorrect validation on the $external database. This may result in mongod denial of service or server crash. This issue affects: MongoDB Inc. MongoDB Server v5.0 versions, prior to and including v5.0.6.
OSV
CVE-2022-24272: An authenticated user may trigger an invariant assertion during command dispatch due to incorrect validation on the $external database
osv·2022-04-21·CVSS 6.5
CVE-2022-24272 [MEDIUM] CVE-2022-24272: An authenticated user may trigger an invariant assertion during command dispatch due to incorrect validation on the $external database
An authenticated user may trigger an invariant assertion during command dispatch due to incorrect validation on the $external database. This may result in mongod denial of service or server crash. This issue affects: MongoDB Inc. MongoDB Server v5.0 versions, prior to and including v5.0.6.
No detection rules found.
No public exploits indexed.
No writeups or analysis indexed.
2022-04-21
Published