Threats tagged 'bit-mongodb-2024-6375'

A missing authorization check in a MongoDB command for refining a collection shard key can cause the command to run directly on a shard. This may degrade query performance or reveal chunk boundaries through timing side channels. The vulnerability affects MongoDB Server versions 5.0 prior to 5.0.22, 6.0 prior to 6.0.11, and 7.0 prior to 7.0.3. A patch is available to address this issue.