Description
A user authorized to perform database queries may trigger denial of service by issuing specially crafted queries, which use $lookup and collations. This issue affects MongoDB Server v4.2 versions prior to 4.2.1; MongoDB Server v4.0 versions prior to 4.0.13 and MongoDB Server v3.6 versions prior to 3.6.15.
Remediation
References
Related Vulnerabilities
MediaWiki Insufficiently Protected Credentials Vulnerability (CVE-2020-29005)
WordPress Plugin Share and Follow 'admin.php' Cross-Site Scripting (1.80.3)
WordPress Plugin Advanced Custom Fields (ACF) Security Bypass (5.12)
Coppermine Exposure of Sensitive Information to an Unauthorized Actor Vulnerability (CVE-2011-3722)