Description

MongoDB before 2.4.13 and 2.6.x before 2.6.8 allows remote attackers to cause a denial of service via a crafted UTF-8 string in a BSON request.

Remediation

References

CVE-2015-1609

Related Vulnerabilities

Plone CMS Permissions, Privileges, and Access Controls Vulnerability (CVE-2016-4043)

WordPress Plugin Contact Bank-Contact Form Builder for WordPress Cross-Site Scripting (3.0.30)

Moodle Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2021-32475)

WordPress Plugin Insert or Embed Articulate Content into WordPress Remote Code Execution (4.2997)

Oracle Database Server CVE-2021-2234 Vulnerability (CVE-2021-2234)

Severity

Medium

Tags

Missing Update Known Vulnerabilities CWE-20 CVE-2015-1609