| Package | Affected versions | Patched versions |
|---|---|---|
| mongodb | ≥ 8.0.0, < 8.0.24≥ 8.2.0, < 8.2.10≥ 8.3.0, < 8.3.3< 7.0.35 | 8.0.248.2.108.3.37.0.35 |
The $_internalApplyOplogUpdate aggregation pipeline stage can be used to execute a document diff containing a malformed binary diff to return memory out-of-bounds or crash the server. $_internalApplyOplogUpdate can be executed by any authenticated user with access to the aggregate command.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free