Description
An attacker with basic CRUD permissions on a replicated collection can run the applyOps command with specially malformed oplog entries, resulting in a potential denial of service on secondaries. This issue affects MongoDB Server v4.0 versions prior to 4.0.27; MongoDB Server v4.2 versions prior to 4.2.16; MongoDB Server v4.4 versions prior to 4.4.9.
Remediation
References
Related Vulnerabilities
WordPress Plugin Get Recent Comments Cross-Site Scripting (2.0.6)
Python Improper Restriction of XML External Entity Reference Vulnerability (CVE-2022-48565)
WordPress 4.2.x Multiple Vulnerabilities (4.2 - 4.2.17)
WordPress Plugin Calendar Event Multi View Unspecified Vulnerability (1.3.58)
WordPress Plugin Simple Banner Cross-Site Scripting (2.11.0)