Description
An authenticated user with read access can cause the mongod process to be terminated through certain aggregation expressions that execute server-side JavaScript. The issue involves improper memory handling during document processing.
Remediation
References
Related Vulnerabilities
Moodle CVE-2019-3851 Vulnerability (CVE-2019-3851)
WordPress 6.0.x Multiple Vulnerabilities (6.0 - 6.0.1)
MediaWiki Observable Discrepancy Vulnerability (CVE-2022-41765)
WordPress Plugin WP Visitor Statistics (Real Time Traffic) Unspecified Vulnerability (4.8)
SharePoint Deserialization of Untrusted Data Vulnerability (CVE-2026-66808)