VDB

CVE-2024-8305

CVE-2024-8305 PUBLISHED CVSS 6.5 MEDIUM

prepareUnique index may cause secondaries to crash due to incorrect enforcement of index constraints on secondaries, where in extreme cases may cause multiple secondaries crashing leading to no primaries. This issue affects MongoDB Server v6.0 versions prior to 6.0.17, MongoDB Server v7.0 versions prior to 7.0.13 and MongoDB Server v7.3 versions prior to 7.3.4

EPSS 0.59% · 46.2th percentile

Risk Scores

CVSS 3.1
6.5
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
EPSS Score
0.59%
46.2th percentile

Affected Products

VendorProductVersions
Bitnamimongodb6.0.0, 7.0.0
Bitnamimongodb6.0.0, 7.0.0

Timeline

  • Oct 21, 2024 CVE Published
  • Oct 22, 2024 EPSS Score
  • Oct 22, 2024 Coalition ESS Score
  • Nov 7, 2024 Coalition ESS Score
  • Nov 10, 2024 EPSS Score
  • Nov 29, 2024 EPSS Score
  • Dec 19, 2024 EPSS Score
  • Jan 7, 2025 EPSS Score
  • Jan 26, 2025 EPSS Score
  • Feb 14, 2025 EPSS Score
  • Mar 5, 2025 EPSS Score
  • Mar 24, 2025 EPSS Score
Open in Interactive Console →
$ Console Community · 100/wk Open console ›