Description
A user authorized to perform database queries may trigger denial of service by issuing specially crafted queries, which use $lookup and collations. This issue affects MongoDB Server v4.2 versions prior to 4.2.1; MongoDB Server v4.0 versions prior to 4.0.13 and MongoDB Server v3.6 versions prior to 3.6.15.
Remediation
References
Related Vulnerabilities
WordPress Plugin Spectra-WordPress Gutenberg Blocks Cross-Site Scripting (1.25.5)
WordPress Plugin Instagram Feed Unspecified Vulnerability (1.10.2)
Moodle Improper Input Validation Vulnerability (CVE-2013-2083)
ownCloud Improper Control of Generation of Code ('Code Injection') Vulnerability (CVE-2014-2044)