CVE-2025-3084 | THREATINT

We use these services and cookies to improve your user experience. You may opt out if you wish, however, this may limit some features on this site.

Please see our statement on Data Privacy.

Crisp.chat (Helpdesk and Chat)

Ok

Description

When run on commands with certain arguments set, explain may fail to validate these arguments before using them. This can lead to crashes in router servers. This affects MongoDB Server v5.0 prior to 5.0.31, MongoDB Server v6.0 prior to 6.0.20, MongoDB Server v7.0 prior to 7.0.16 and MongoDB Server v8.0 prior to 8.0.4

Reserved 2025-04-01 | Published 2025-04-01 | Updated 2025-04-01 | Assigner mongodb

MEDIUM: 6.5CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Problem types

CWE-703: Improper Check or Handling of Exceptional Conditions

Product status

Default status

unaffected

5.0 before 5.0.31

affected

6.0 before 6.0.20

affected

7.0 before 7.0.16

affected

8.0 before 8.0.4

affected

References

jira.mongodb.org/browse/SERVER-103153

cve.org (CVE-2025-3084)

nvd.nist.gov (CVE-2025-3084)

Download JSON

https://cve.threatint.eu/CVE/CVE-2025-3084

Support options

Helpdesk Chat, Email, Knowledgebase