VULNERABILITY INTELLIGENCE

CVE-2024-8305

CVSS score6.5 MEDIUM
EPSS probability0.59%
CISA KEVNot currently listed
Published2024-10-21
Last modified2026-06-17
CVSS vectorCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Description

prepareUnique index may cause secondaries to crash due to incorrect enforcement of index constraints on secondaries, where in extreme cases may cause multiple secondaries crashing leading to no primaries. This issue affects MongoDB Server v6.0 versions prior to 6.0.17, MongoDB Server v7.0 versions prior to 7.0.13 and MongoDB Server v7.3 versions prior to 7.3.4

Weakness classification

  • cna@mongodb.com: CWE-1288
  • nvd@nist.gov: NVD-CWE-Other

Primary references