MongoDB 5.0.30
Approved changes feed: RSS · Atom
cpe:2.3:a:mongodb:mongodb:5.0.30:*:*:*:*:*:*:*
part: a version: 5.0.30 update: *
| Vendor | Mongodb (1aa156a6-63a9-5032-baaf-10197d408a1e) |
|---|---|
| Product | Mongodb (fa9f1f9b-0cc9-5830-a189-b908276ac432) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from NVD CPE 2.0 feed |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
pkg:deb/debian/mongodb |
purl2cpe | 2026-06-01 10:11:17.859140 |
pkg:deb/ubuntu/mongodb |
purl2cpe | 2026-06-01 10:11:17.859141 |
pkg:github/mongodb/mongo |
purl2cpe | 2026-06-01 10:11:17.859143 |
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2025-6707 |
vulnerable | 2026-06-03 15:12:28.634866 |
Race condition in privilege cache invalidation cycle
MEDIUM (4.2)
Under certain conditions, an authenticated user request may execute with stale privileges following an intentional change by an authorized administrator. This issue affects MongoDB Server v5.0 version prior to 5.0.31, MongoDB Server v6.0 version prior to 6.0.24, MongoDB Server v7.0 version prior to 7.0.21 and MongoDB Server v8.0 version prior to 8.0.5.
Published: 2025-06-26T14:04:46.283Z
Updated: 2026-02-26T17:50:22.191Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-3085 |
vulnerable | 2026-06-03 15:01:03.622774 |
MongoDB Server running on Linux may allow unexpected connections where intermediate certificates are revoked
HIGH (8.1)
A MongoDB server under specific conditions running on Linux with TLS and CRL revocation status checking enabled, fails to check the revocation status of the intermediate certificates in the peer's certificate chain. In cases of MONGODB-X509, which is not enabled by default, this may lead to improper authentication. This issue may also affect intra-cluster authentication. This issue affects MongoDB Server v5.0 versions prior to 5.0.31, MongoDB Server v6.0 versions prior to 6.0.20, MongoDB Server v7.0 versions prior to 7.0.16 and MongoDB Server v8.0 versions prior to 8.0.4.
Required Configuration : MongoDB Server must be running on Linux Operating Systems and CRL revocation status checking must be enabled
Published: 2025-04-01T12:05:05.401Z
Updated: 2025-04-01T13:03:02.701Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-3084 |
vulnerable | 2026-06-03 15:01:03.602538 |
MongoDB Server may crash due to improper validation of explain command
MEDIUM (6.5)
When run on commands with certain arguments set, explain may fail to validate these arguments before using them. This can lead to crashes in router servers. This affects MongoDB Server v5.0 prior to 5.0.31, MongoDB Server v6.0 prior to 6.0.20, MongoDB Server v7.0 prior to 7.0.16 and MongoDB Server v8.0 prior to 8.0.4
Published: 2025-04-01T11:14:19.784Z
Updated: 2025-04-01T13:10:04.793Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-3083 |
vulnerable | 2026-06-03 15:01:03.589028 |
Malformed MongoDB wire protocol messages may cause mongos to crash
HIGH (7.5)
Specifically crafted MongoDB wire protocol messages can cause mongos to crash during command validation. This can occur without using an authenticated connection. This issue affects MongoDB v5.0 versions prior to 5.0.31, MongoDB v6.0 versions prior to 6.0.20 and MongoDB v7.0 versions prior to 7.0.16
Published: 2025-04-01T11:12:31.268Z
Updated: 2025-04-01T13:18:48.632Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-3082 |
vulnerable | 2026-06-03 15:01:03.557498 |
User may override a view's collation and gain unauthorized access to underlying data
LOW (3.1)
A user authorized to access a view may be able to alter the intended collation, allowing them to access to a different or unintended view of underlying data. This issue affects MongoDB Server v5.0 version prior to 5.0.31, MongoDB Server v6.0 version prior to 6.0.20, MongoDB Server v7.0 version prior to 7.0.14 and MongoDB Server v7.3 versions prior to 7.3.4.
Published: 2025-04-01T11:08:06.589Z
Updated: 2025-04-01T15:14:39.348Z Reference links |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.