CyberRota Analysis
This is a medium severity vulnerability with a CVSS score of 6.5. It affects MongoDB. It may lead to a denial-of-service condition.
CVE
CVE-2021-20330
Severity
MEDIUM
CVSS
6.5
EPSS
1.04%
MongoDB
Original NVD Description
An attacker with basic CRUD permissions on a replicated collection can run the applyOps command with specially malformed oplog entries, resulting in a potential denial of service on secondaries. This issue affects MongoDB Server v4.0 versions prior to 4.0.27; MongoDB Server v4.2 versions prior to 4.2.16; MongoDB Server v4.4 versions prior to 4.4.9.
Related CVEs
Other vulnerabilities affecting the same vendor(s)