CVE-2021-20333 — Server log entry spoofing via newline injection
Sending specially crafted commands to a MongoDB Server may result in artificial log entries being generated or for log entries to be split. This issue affects MongoDB Server v3.…
Published: 2021-07-23 · CVSS: 5.3 · CVSS 3.1
Sending specially crafted commands to a MongoDB Server may result in artificial log entries being generated or for log entries to be split. This issue affects MongoDB Server v3.6 versions prior to 3.6.20; MongoDB Server v4.0 versions prior to 4.0.21 and MongoDB Server v4.2 versions prior to 4.2.10.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7