Description

The find prototype in scripting/engine_v8.h in MongoDB 2.4.0 through 2.4.4 allows remote authenticated users to cause a denial of service (uninitialized pointer dereference and server crash) or possibly execute arbitrary code via an invalid RefDB object.

Remediation

References

CVE-2013-3969

Related Vulnerabilities

phpMyFAQ Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2023-1880)

WordPress 5.0.x Multiple Vulnerabilities (5.0 - 5.0.6)

WordPress Plugin YOP Poll Cross-Site Scripting (5.7.3)

WordPress Plugin WP App Maker Cross-Site Scripting (1.0.16.4)

PostgreSQL Improper Access Control Vulnerability (CVE-2019-10128)

Severity

Medium

Classification

CVE-2013-3969

Tags

Missing Update Known Vulnerabilities