← Back

CVE-2025-3083

nvd nist
Published: Apr 1, 2025Modified: Jun 17, 2026

JSON object

Loading...
7.5
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Exploitability: 3.9 / Impact: 3.6
Source: CNA (Secondary)

Description

Specifically crafted MongoDB wire protocol messages can cause mongos to crash during command validation. This can occur without using an authenticated connection. This issue affects MongoDB v5.0 versions prior to 5.0.31,  MongoDB v6.0 versions prior to 6.0.20 and MongoDB v7.0 versions prior to 7.0.16

Affected (3)

Products: Mongodb: Mongodb
Mongodb
1 product
Mongodb
Configuration A
3 vulnerable
Vulnerable SoftwareAffected Versions
Mongodb
Mongodb
From 5.0.0 to 5.0.31
Mongodb
From 6.0.0 to 6.0.20
Mongodb
From 7.0.0 to 7.0.16

Related CWEs

CWE-248
Uncaught Exception
An exception is thrown from a function, but it is not caught.

References (1)

Source: cna@mongodb.com
Issue TrackingVendor Advisory

Timeline

No history available yet.