CVE-2025-13644
Essential information
- Published
- 25/11/2025 06:15
- Modified
- 11/12/2025 23:19
- Author
- —
- Creator
- —
- CVSS
- 7.1 HIGH (v3) 7.1 HIGH (v4.0)
- CISA KEV
- No
- CWE
- —
- CVSS vector
-
—
—
CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
CVSS metrics
- Access vector
- —
- Access complexity
- —
- Authentication
- —
- Confidentiality impact
- —
- Integrity impact
- —
- Availability impact
- —
- Exploitability
- —
- Remediation level
- —
- Report confidence
- —
- Temporal score
- —
- Attack vector
- —
- Attack complexity
- —
- Privileges required
- —
- User interaction
- —
- Scope
- —
- Confidentiality impact
- —
- Integrity impact
- —
- Availability impact
- —
- Exploit code maturity
- —
- Remediation level
- —
- Report confidence
- —
- Temporal score
- —
- Attack vector
- NETWORK
- Attack complexity
- LOW
- Attack requirements
- NONE
- Privileges required
- LOW
- User interaction
- NONE
- Confidentiality (V)
- NONE
- Confidentiality (S)
- NONE
- Integrity (V)
- NONE
- Integrity (S)
- NONE
- Availability (V)
- HIGH
- Availability (S)
- NONE
- Exploit maturity
- NOT_DEFINED
Description
MongoDB Server may experience an invariant failure during batched delete operations when handling documents. The issue arises when the server mistakenly assumes the presence of multiple documents in a batch based solely on document size exceeding BSONObjMaxSize. This issue affects MongoDB Server v7.0 versions prior to 7.0.26, MongoDB Server v8.0 versions prior to 8.0.13, and MongoDB Server v8.1 versions prior to 8.1.2
NVD status
- Status
- Analyzed — CVE has had analysis completed and all data associations made.
- Source
- [email protected]
- NVD
- View on NVD
Affected products (CPE)
| Product | CPE |
|---|---|
| mongodb / mongodb | cpe:2.3:a:mongodb:mongodb:*:*:*:*:-:*:*:* |
| mongodb / mongodb | cpe:2.3:a:mongodb:mongodb:*:*:*:*:-:*:*:* |
| mongodb / mongodb | cpe:2.3:a:mongodb:mongodb:*:*:*:*:-:*:*:* |
| mongodb / mongodb | cpe:2.3:a:mongodb:mongodb:8.2.0:alpha:*:*:-:*:*:* |
| mongodb / mongodb | cpe:2.3:a:mongodb:mongodb:8.2.0:alpha0:*:*:-:*:*:* |
| mongodb / mongodb | cpe:2.3:a:mongodb:mongodb:8.2.0:alpha1:*:*:-:*:*:* |
| mongodb / mongodb | cpe:2.3:a:mongodb:mongodb:8.2.0:alpha2:*:*:-:*:*:* |