CyberRota Analysis
AI-GeneratedMongoDB Server is vulnerable due to insufficient validation of storage engine configuration options, allowing authenticated users with write privileges to manipulate parameters during collection creation. This flaw can lead to out-of-bounds memory writes, resulting in server crashes and potential arbitrary code execution. Organizations using MongoDB should prioritize patching this vulnerability to mitigate risks of service disruption and unauthorized access.
Public Exploit Signal
A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.
Note: these links are listed for security research and verification purposes only.
Original NVD Description
Insufficient validation of storage engine configuration options in MongoDB Server allows an authenticated user with write privileges to supply crafted parameters during collection creation that override internal storage metadata. This results in an out-of-bounds memory write in the server process, causing a denial of service via server crash, with potential for further impact including arbitrary code execution.
Related CVEs
Other vulnerabilities affecting the same vendor(s)