CyberRota Analysis
This is a medium severity vulnerability with a CVSS score of 5.3. It affects MongoDB. Exploitation may require the attacker to be authenticated.
CVE
CVE-2024-3374
Severity
MEDIUM
CVSS
5.3
EPSS
0.46%
MongoDB
Original NVD Description
An unauthenticated user can trigger a fatal assertion in the server while generating ftdc diagnostic metrics due to attempting to build a BSON object that exceeds certain memory sizes. This issue affects MongoDB Server v5.0 versions prior to and including 5.0.16 and MongoDB Server v6.0 versions prior to and including 6.0.5.
Related CVEs
Other vulnerabilities affecting the same vendor(s)