Total vulnerabilities in the database
A user authorized to performing a specific type of query may trigger a denial of service by issuing a generic explain command on a find query. This issue affects MongoDB Server v4.0 versions prior to 4.0.6 and MongoDB Server v3.6 versions prior to 3.6.11.
| Software | From | Fixed in |
|---|---|---|
| mongodb / mongodb | 4.0.0 | 4.0.6 |
| mongodb / mongodb | 3.6.0 | 3.6.11 |