← Back

CVE-2020-7929

nvd nist
Published: Mar 1, 2021Modified: Jun 17, 2026

JSON object

Loading...
6.5
Vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
Exploitability: 2.8 / Impact: 3.6
Source: NVD

Description

A user authorized to perform database queries may trigger denial of service by issuing specially crafted query contain a type of regex. This issue affects MongoDB Server v3.6 versions prior to 3.6.21 and MongoDB Server v4.0 versions prior to 4.0.20.

Affected (2)

Products: Mongodb: Mongodb
Mongodb
1 product
Mongodb
Configuration A
2 vulnerable
Vulnerable SoftwareAffected Versions
Mongodb
Mongodb
From 3.6.0 to 3.6.21
Mongodb
From 4.0.0 to 4.0.20

Related CWEs

CWE-185
Incorrect Regular Expression
The product specifies a regular expression in a way that causes data to be improperly matched or compared.

References (2)

Source: cna@mongodb.com
Issue TrackingPatchVendor Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Issue TrackingPatchVendor Advisory

Timeline

No history available yet.