CVE-2013-1892

概要

参考情報

• blog.scrt.ch/2013/03/24/mongodb-0-day-ssji-to-rce · Exploit
• lists.fedoraproject.org/pipermail/package-announce/2013-April/101630.html
• lists.fedoraproject.org/pipermail/package-announce/2013-April/101679.html
• rhn.redhat.com/errata/RHSA-2013-1170.html · Vendor Advisory
• exploit-db.com/exploits/24935
• exploit-db.com/exploits/24947
• mongodb.org/about/alerts · Vendor Advisory
• openwall.com/lists/oss-security/2013/03/25/9
• jira.mongodb.org/browse/SERVER-9124

mongodb のその他の脆弱性

• CVE-2026-89099高 7.5A race condition in the document value layer of MongoDB Server can allow concurrent server threads to operate on the same internal memory wi…
• CVE-2026-82076中 6.5An integer overflow in the query planning component of MongoDB Server can allow an authenticated user with ordinary database-level read/writ…
• CVE-2026-82075高 7.5An uncontrolled resource consumption weakness exists in the request-handling path of the MongoDB sharded-cluster router process. A client th…
• CVE-2026-82074中 6.5MongoDB Server contains an incorrect authorization vulnerability in the aggregation framework. An authenticated user with minimal privileges…
• CVE-2026-82073中 6.5A security issue in the MongoDB Server aggregation framework allows an authenticated user with limited read privileges to bypass view-level …