Description
An authenticated user can cause a MongoDB server to crash or return incorrect results by creating documents that interfere with internal metadata processing during query execution. This stems from insufficient separation between user-controlled document fields and internal metadata in certain execution paths.
Affected products
Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.
MongoDB MongoDB Server
Default version status: unaffected
8.3.0 to < 8.3.3affected8.2.0 to < 8.2.10affected8.0.0 to < 8.0.24affected7.0.0 to < 7.0.35affected