Vulnerability Database

300,445

Total vulnerabilities in the database

CVE-2013-3969

The find prototype in scripting/engine_v8.h in MongoDB 2.4.0 through 2.4.4 allows remote authenticated users to cause a denial of service (uninitialized pointer dereference and server crash) or possibly execute arbitrary code via an invalid RefDB object.

  • Published: Oct 1, 2013
  • Updated: Nov 9, 2025
  • CVE: CVE-2013-3969
  • Severity: Medium
  • Exploit:

CVSS v2:

  • Severity: Medium
  • Score: 6.5
  • AV:N/AC:L/Au:S/C:P/I:P/A:P

CWEs:

Software From Fixed in
mongodb / mongodb 2.4.2 2.4.2.x
mongodb / mongodb 2.4.0 2.4.0.x
mongodb / mongodb 2.4.3 2.4.3.x
mongodb / mongodb 2.4.4 2.4.4.x
mongodb / mongodb 2.4.1 2.4.1.x