CVE-2018-25004 — Invariant failure when explaining a find with a UUID

CVE-2018-25004

Invariant failure when explaining a find with a UUID PUBLISHED

Description (CNA)

A user authorized to performing a specific type of query may trigger a denial of service by issuing a generic explain command on a find query. This issue affects MongoDB Server v4.0 versions prior to 4.0.6 and MongoDB Server v3.6 versions prior to 3.6.11.

Affected (CNA)

Vendor / product	Versions
MongoDB Inc. / MongoDB Server	affected 3.6 before 3.6.11; affected 4.0 before 4.0.6

CWE

CWE-20

References

https://jira.mongodb.org/browse/SERVER-38275

ADP enrichment

CVE

No English description supplied.

https://jira.mongodb.org/browse/SERVER-38275

CISA-ADP

No English description supplied.

No references supplied.