CVE-2018-20805

A user authorized to perform database queries may trigger denial of service by issuing specially crafted queries, which perform an $elemMatch . This issue affects MongoDB Server v4.0 versions prior to 4.0.5 and MongoDB Server v3.6 versions prior to 3.6.10.

Score

CVSS 3.1 6.5 Medium

Status

Modified - cna@mongodb.com

Published

2020-11-23

Last modified

2024-09-17

Weaknesses

CWE-834

Affected products

• Mongodb (Mongodb)
• Mongodb Server (Mongodb Inc.)

References

• https://jira.mongodb.org/browse/SERVER-38164