CERT-Bund: MongoDB Vulnerabilities Disclosed, Remote Attack Possible

CERT-Bund has disclosed multiple vulnerabilities in various versions of MongoDB, including Open Source MongoDB versions prior to 8.3.0-rc0, 8.0.20, 7.0.31, and 8.2.6. These vulnerabilities have a high CVSS Base Score of 8.8 and a temporal score of 7.7, indicating a significant risk. Exploitation allows remote attackers to disclose information and execute arbitrary code on affected systems running Linux, UNIX, or Windows.

Organizations utilizing the affected MongoDB versions should immediately review their deployments and apply available mitigations or update to patched versions. Failure to address these vulnerabilities could lead to unauthorized access, data breaches, and system compromise. While no specific compliance deadline is mentioned, prompt action is recommended to prevent exploitation.