Description
An authenticated user can cause a MongoDB server to crash or return incorrect results by creating documents that interfere with internal metadata processing during query execution. This stems from insufficient separation between user-controlled document fields and internal metadata in certain execution paths.
Remediation
References
Related Vulnerabilities
ReviveAdserver Use of a Broken or Risky Cryptographic Algorithm Vulnerability (CVE-2021-22948)
WordPress Plugin Ajax Store Locator SQL Injection (1.2.0)
WordPress Plugin Media Tagz Gallery Multiple Unspecified Vulnerabilities (1.0)
ownCloud Permissions, Privileges, and Access Controls Vulnerability (CVE-2014-9048)