Related Vulnerabilities: CVE-2022-24272  

An authenticated user may trigger an invariant assertion during command dispatch due to incorrect validation on the $external database. This may result in mongod denial of service or server crash. This issue affects: MongoDB Inc. MongoDB Server v5.0 versions, prior to and including v5.0.6.

Description

The MITRE CVE dictionary describes this issue as:

An authenticated user may trigger an invariant assertion during command dispatch due to incorrect validation on the $external database. This may result in mongod denial of service or server crash. This issue affects: MongoDB Inc. MongoDB Server v5.0 versions, prior to and including v5.0.6.

Additional Information

  • Bugzilla 2077736: CVE-2022-24272 mongodb: authenticated user may trigger an invariant assertion during command dispatch due to incorrect validation on the $external database
  • FAQ: Frequently asked questions about CVE-2022-24272