CVE-2025-3084

—

CVSS 3.1

6.5 medium

EPSS

<1%p33

Published

Apr 1, 2025 (Apr 1, 2025)

Modified

Jun 17, 2026

Description

When run on commands with certain arguments set, explain may fail to validate these arguments before using them. This can lead to crashes in router servers. This affects MongoDB Server v5.0 prior to 5.0.31, MongoDB Server v6.0 prior to 6.0.20, MongoDB Server v7.0 prior to 7.0.16 and MongoDB Server v8.0 prior to 8.0.4

Vendors: mongodb
Products: mongodb
Weakness: CWE-703
Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

NVD CVE.org GitHub PoCs EPSS (0.4%)

In the news0 stories

No ingested article mentions this CVE yet.