CVE-2024-3372

Name of the Vulnerable Software and Affected Versions MongoDB Server versions prior to 7.0.6 MongoDB Server versions prior to 6.0.14 MongoDB Server versions prior to 5.0.25

Description The issue is caused by improper validation of certain metadata input, which may result in the server not correctly serialising BSON. This can be performed pre-authentication and may cause unexpected application behavior, including unavailability of serverStatus responses.

Recommendations For MongoDB Server versions prior to 7.0.6, update to version 7.0.6 or later. For MongoDB Server versions prior to 6.0.14, update to version 6.0.14 or later. For MongoDB Server versions prior to 5.0.25, update to version 5.0.25 or later.