VYPR
← All advisories
Medium severity5.3NVD Advisory· Published Jul 23, 2021· Updated Jun 17, 2026

CVE-2021-20333

CVE-2021-20333

Description

Sending specially crafted commands to a MongoDB Server may result in artificial log entries being generated or for log entries to be split. This issue affects MongoDB Server v3.6 versions prior to 3.6.20; MongoDB Server v4.0 versions prior to 4.0.21 and MongoDB Server v4.2 versions prior to 4.2.10.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

5
  • MongoDB/MongoDB2 versions
    cpe:2.3:a:mongodb:mongodb:*:*:*:*:*:*:*:*+ 1 more
    • cpe:2.3:a:mongodb:mongodb:*:*:*:*:*:*:*:*range: >=3.6.0,<3.6.20
    • (no CPE)range: <3.6.20, <4.0.21, <4.2.10
  • MongoDB/Serverllm-fuzzy
    Range: <3.6.20, <4.0.21, <4.2.10
  • osv-coords
    pkg:bitnami/mongodb
    Range: >= 3.6.0, < 3.6.20
  • MongoDB Inc./MongoDB Serverv5
    Range: 3.6

Patches

Vulnerability mechanics

References

1

News mentions

1