Description
A user authorized to perform database queries may trigger denial of service by issuing specially crafted queries, which use $lookup and collations. This issue affects MongoDB Server v4.2 versions prior to 4.2.1; MongoDB Server v4.0 versions prior to 4.0.13 and MongoDB Server v3.6 versions prior to 3.6.15.
Remediation
References
Related Vulnerabilities
PHP Insufficient Entropy Vulnerability (CVE-2008-2108)
WordPress 4.1.x Multiple Vulnerabilities (4.1 - 4.1.17)
IBM RTC Exposure of Sensitive Information to an Unauthorized Actor Vulnerability (CVE-2017-1099)
Joomla! Core Cross-Site Scripting (2.5.0 - 3.9.24)
WordPress Plugin Sexy Add Template Cross-Site Request Forgery (1.0)