Maven/org.mongodb:mongodb-driver-sync CVE-2021-20328: medium 6.8, EPSS 0.44%
Improper Certificate Validation in MongoDB
Action: Upgrade org.mongodb:mongodb-driver-sync to 3.11.3 (3.11.x), 3.12.8 (3.12.x), 4.0.6 (4.0.x), 4.1.2 (4.1.x) or 4.2.1 (4.2.x) or later.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 4.0.0 | 4.0.6 | - |
| 4.1.0 | 4.1.2 | - |
| 4.2.0 | 4.2.1 | - |
| 3.12.0 | 3.12.8 | - |
| 3.11.0 | 3.11.3 | - |
Fixed versions
| 4.0.6 | 4.1.2 | 4.2.1 | 3.12.8 | 3.11.3 |
Sources
- osv: GHSA-rghw-6px2-fgwc#Maven/org.mongodb:mongodb-driver-sync
- https://nvd.nist.gov/vuln/detail/CVE-2021-20328
- https://jira.mongodb.org/browse/JAVA-4017
CVE-2021-20328 · published · modified · JSON