VYPR
← All advisories
Medium severity6.5NVD Advisory· Published Nov 23, 2020· Updated Jun 17, 2026

CVE-2018-20802

CVE-2018-20802

Description

A user authorized to perform database queries may trigger denial of service by issuing specially crafted queries with compound indexes affecting QueryPlanner. This issue affects MongoDB Server v3.6 versions prior to 3.6.9 and MongoDB Server v4.0 versions prior to 4.0.3.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

2
  • MongoDB/Serverllm-fuzzy
    Range: v3.6 versions prior to 3.6.9 and v4.0 versions prior to 4.0.3
  • MongoDB Inc./MongoDB Serverv5
    Range: 3.6

Patches

Vulnerability mechanics

References

1

News mentions

0

No linked articles in our index yet.