CVE-2021-20326

    Dashboard / Vulnerabilities / CVE-2021-20326

    CVE-2021-20326

    Published: 30 Apr 2021Last Modified: 8 Jul 2026

    Summary:

    Details: A user authorized to performing a specific type of find query may trigger a denial of service. This issue affects MongoDB Server v4.4 versions prior to 4.4.4.

    References: https://jira.mongodb.org/browse/SERVER-53929

    Affected packages

    Package

    Name:

    Purl:

    Affected ranges

    Type: GIT

    Events:

    Introduced- 563487e100c4215e2dce98d0af2a6a5a2d67c5cf
    Fixed -8db30a63db1a9d84bdcad0c83369623f708e0397

    Affected versions

    r4.4.4-rc0
    r4.4.3-rc0
    r4.4.3
    r4.4.2-rc1
    r4.4.2
    r4.4.2-rc0
    r4.4.1-rc3
    r4.4.1
    r4.4.1-rc2
    r4.4.1-rc1
    r4.4.1-rc0
    r4.4.0

    Common Vulnerability Scoring System

    Attack Vector
    Network
    Adjacent
    Local
    Physical
    Privileges Required
    None
    Low
    High
    User Interaction
    None
    Required
    Scope
    Unchanged
    Changed
    Confidentiality
    None
    Low
    High
    Integrity
    None
    Low
    High
    Availability
    None
    Low
    High
    CVE-2021-20326 | CVE-DB