UpHeron
All vulnerabilities

Servers and applications

CVE-2022-24272

An authenticated user may trigger an invariant assertion during command dispatch due to incorrect validation on the $external database. This may result in mongod denial of service or server crash. This issue affects: MongoDB Inc. MongoDB Server v5.0 versions, prior to and including v5.0.6.

Severity
Medium 6.5
Published
21 Apr 2022
Last changed
17 Jun 2026
Added to UpHeron
21 Oct 2026
Sources
NVD

Affected software

SoftwareAffected versions
MongoDBServers and applications · cpe:a:mongodb:mongodb
  • From 5.0.0 up to 5.0.6

References

  • NVD https://nvd.nist.gov/vuln/detail/CVE-2022-24272
  • CVE.org https://www.cve.org/CVERecord?id=CVE-2022-24272