MongoDB Server may allow queries to be terminated by unautho… (CVE-2025-13643)

Résumé

MongoDB Server may allow queries to be terminated by unauthorized users

Description d'origine

La description telle que publiée par la source (souvent en anglais).

A user with access to the cluster with a limited set of privilege actions may be able to terminate queries that are being executed by other users. This may cause a denial of service by preventing a fraction of queries from successfully completing. This issue affects MongoDB Server v7.0 versions prior to 7.0.26 and MongoDB Server v8.0 versions prior to 8.0.14

Source: OSV.dev (Open Source Vulnerabilities) NVD OSV

Paquets affectés

Bitnami mongodb

[{"type":"SEMVER","events":[{"introduced":"7.0.0"},{"fixed":"7.0.26"},{"introduced":"8.0.0"},{"fixed":"8.0.14"}]}]

Références

advisory jira.mongodb.org
web nvd.nist.gov