A high-severity security flaw has been disclosed in MongoDB that could allow unauthenticated users to read uninitialized heap memory. The vulnerability, tracked as CVE-2025-14847 (CVSS score: 8.7), has been described as a case of improper handling of length parameter inconsistency, which arises when a program fails to appropriately tackle scenarios where a length field is inconsistent with the
source https://thehackernews.com/2025/12/new-mongodb-flaw-lets-unauthenticated.html
Saturday, December 27, 2025
New MongoDB Flaw Lets Unauthenticated Attackers Read Uninitialized Memory
.png){kind=avatar}
Subscribe to:
Post Comments (Atom)
No comments:
Post a Comment
please do not enter any spam link in the comment box