Mongodb · Mongodb Server · CVE-2024-3372
**Name of the Vulnerable Software and Affected Versions**
MongoDB Server versions prior to 7.0.6
MongoDB Server versions prior to 6.0.14
MongoDB Server versions prior to 5.0.25
**Description**
The issue is caused by improper validation of certain metadata input, which may result in the server not correctly serialising BSON. This can be performed pre-authentication and may cause unexpected application behavior, including unavailability of serverStatus responses.
**Recommendations**
For MongoDB Server versions prior to 7.0.6, update to version 7.0.6 or later.
For MongoDB Server versions prior to 6.0.14, update to version 6.0.14 or later.
For MongoDB Server versions prior to 5.0.25, update to version 5.0.25 or later.