CyberRota Analysis
This is a medium severity vulnerability with a CVSS score of 4.2. It affects MongoDB. Exploitation may require the attacker to be authenticated.
CVE
CVE-2025-6707
Severity
MEDIUM
CVSS
4.2
EPSS
0.15%
MongoDB
Original NVD Description
Under certain conditions, an authenticated user request may execute with stale privileges following an intentional change by an authorized administrator. This issue affects MongoDB Server v5.0 version prior to 5.0.31, MongoDB Server v6.0 version prior to 6.0.24, MongoDB Server v7.0 version prior to 7.0.21 and MongoDB Server v8.0 version prior to 8.0.5.
Related CVEs
Other vulnerabilities affecting the same vendor(s)