{"resultsPerPage":1,"startIndex":0,"totalResults":1,"format":"NVD_CVE","version":"2.0","timestamp":"2026-08-02T23:13:32.883","vulnerabilities":[{"cve":{"id":"CVE-2024-8013","sourceIdentifier":"cna@mongodb.com","published":"2024-10-28T13:15:10.200","lastModified":"2026-06-17T08:21:40.377","vulnStatus":"Analyzed","cveTags":[],"descriptions":[{"lang":"en","value":"A bug in query analysis of certain complex self-referential $lookup subpipelines may result in literal values in expressions for encrypted fields to be sent to the server as plaintext instead of ciphertext. Should this occur, no documents would be returned or written. This issue affects mongocryptd binary (v5.0 versions prior to 5.0.29, v6.0 versions prior to 6.0.17, v7.0 versions prior to 7.0.12 and v7.3 versions prior to 7.3.4) and mongo_crypt_v1.so shared libraries (v6.0 versions prior to 6.0.17, v7.0 versions prior to 7.0.12 and v7.3 versions prior to 7.3.4) released alongside MongoDB Enterprise Server versions."},{"lang":"es","value":"Un error en el análisis de consultas de ciertas subcanalizaciones autorreferenciales complejas de $lookup puede dar como resultado que los valores literales en las expresiones de los campos cifrados se envíen al servidor como texto plano en lugar de texto plano. Si esto ocurriera, no se devolvería ni escribiría ningún documento. Este problema afecta al binario mongocryptd (versiones v5.0 anteriores a 5.0.29, versiones v6.0 anteriores a 6.0.17, versiones v7.0 anteriores a 7.0.12 y versiones v7.3 anteriores a 7.3.4) y a las librerías compartidas mongo_crypt_v1.so (versiones v6.0 anteriores a 6.0.17, versiones v7.0 anteriores a 7.0.12 y versiones v7.3 anteriores a 7.3.4) publicadas junto con las versiones de MongoDB Enterprise Server."}],"affected":[{"source":"cna@mongodb.com","affectedData":[{"vendor":"MongoDB Inc","product":"mongocryptd","defaultStatus":"unaffected","cpes":["cpe:2.3:a:mongodb:mongo_crypt_v1.so:6.0.0:*:*:*:*:mongodb:*:*","cpe:2.3:a:mongodb:mongo_crypt_v1.so:6.0.1:*:*:*:*:mongodb:*:*","cpe:2.3:a:mongodb:mongo_crypt_v1.so:6.0.2:*:*:*:*:mongodb:*:*","cpe:2.3:a:mongodb:mongo_crypt_v1.so:6.0.3:*:*:*:*:mongodb:*:*","cpe:2.3:a:mongodb:mongo_crypt_v1.so:6.0.4:*:*:*:*:mongodb:*:*","cpe:2.3:a:mongodb:mongo_crypt_v1.so:6.0.5:*:*:*:*:mongodb:*:*","cpe:2.3:a:mongodb:mongo_crypt_v1.so:6.0.6:*:*:*:*:mongodb:*:*","cpe:2.3:a:mongodb:mongo_crypt_v1.so:6.0.7:*:*:*:*:mongodb:*:*","cpe:2.3:a:mongodb:mongo_crypt_v1.so:6.0.8:*:*:*:*:mongodb:*:*","cpe:2.3:a:mongodb:mongo_crypt_v1.so:6.0.9:*:*:*:*:mongodb:*:*","cpe:2.3:a:mongodb:mongo_crypt_v1.so:6.0.10:*:*:*:*:mongodb:*:*","cpe:2.3:a:mongodb:mongo_crypt_v1.so:6.0.11:*:*:*:*:mongodb:*:*","cpe:2.3:a:mongodb:mongo_crypt_v1.so:6.0.12:*:*:*:*:mongodb:*:*","cpe:2.3:a:mongodb:mongo_crypt_v1.so:6.0.13:*:*:*:*:mongodb:*:*","cpe:2.3:a:mongodb:mongo_crypt_v1.so:6.0.14:*:*:*:*:mongodb:*:*","cpe:2.3:a:mongodb:mongo_crypt_v1.so:6.0.15:*:*:*:*:mongodb:*:*","cpe:2.3:a:mongodb:mongo_crypt_v1.so:6.0.16:*:*:*:*:mongodb:*:*","cpe:2.3:a:mongodb:mongo_crypt_v1.so:7.0.0:*:*:*:*:mongodb:*:*","cpe:2.3:a:mongodb:mongo_crypt_v1.so:7.0.1:*:*:*:*:mongodb:*:*","cpe:2.3:a:mongodb:mongo_crypt_v1.so:7.0.2:*:*:*:*:mongodb:*:*","cpe:2.3:a:mongodb:mongo_crypt_v1.so:7.0.3:*:*:*:*:mongodb:*:*","cpe:2.3:a:mongodb:mongo_crypt_v1.so:7.0.4:*:*:*:*:mongodb:*:*","cpe:2.3:a:mongodb:mongo_crypt_v1.so:7.0.5:*:*:*:*:mongodb:*:*","cpe:2.3:a:mongodb:mongo_crypt_v1.so:7.0.6:*:*:*:*:mongodb:*:*","cpe:2.3:a:mongodb:mongo_crypt_v1.so:7.0.7:*:*:*:*:mongodb:*:*","cpe:2.3:a:mongodb:mongo_crypt_v1.so:7.0.8:*:*:*:*:mongodb:*:*","cpe:2.3:a:mongodb:mongo_crypt_v1.so:7.0.9:*:*:*:*:mongodb:*:*","cpe:2.3:a:mongodb:mongo_crypt_v1.so:7.0.10:*:*:*:*:mongodb:*:*","cpe:2.3:a:mongodb:mongo_crypt_v1.so:7.0.11:*:*:*:*:mongodb:*:*","cpe:2.3:a:mongodb:mongo_crypt_v1.so:7.3.0:*:*:*:*:mongodb:*:*","cpe:2.3:a:mongodb:mongo_crypt_v1.so:7.3.1:*:*:*:*:mongodb:*:*","cpe:2.3:a:mongodb:mongo_crypt_v1.so:7.3.2:*:*:*:*:mongodb:*:*","cpe:2.3:a:mongodb:mongo_crypt_v1.so:7.3.3:*:*:*:*:mongodb:*:*","cpe:2.3:a:mongodb:mongocryptd:5.0.0:*:*:*:*:mongodb:*:*","cpe:2.3:a:mongodb:mongocryptd:5.0.1:*:*:*:*:mongodb:*:*","cpe:2.3:a:mongodb:mongocryptd:5.0.2:*:*:*:*:mongodb:*:*","cpe:2.3:a:mongodb:mongocryptd:5.0.3:*:*:*:*:mongodb:*:*","cpe:2.3:a:mongodb:mongocryptd:5.0.4:*:*:*:*:mongodb:*:*","cpe:2.3:a:mongodb:mongocryptd:5.0.5:*:*:*:*:mongodb:*:*","cpe:2.3:a:mongodb:mongocryptd:5.0.6:*:*:*:*:mongodb:*:*","cpe:2.3:a:mongodb:mongocryptd:5.0.7:*:*:*:*:mongodb:*:*","cpe:2.3:a:mongodb:mongocryptd:5.0.8:*:*:*:*:mongodb:*:*","cpe:2.3:a:mongodb:mongocryptd:5.0.9:*:*:*:*:mongodb:*:*","cpe:2.3:a:mongodb:mongocryptd:5.0.10:*:*:*:*:mongodb:*:*","cpe:2.3:a:mongodb:mongocryptd:5.0.11:*:*:*:*:mongodb:*:*","cpe:2.3:a:mongodb:mongocryptd:5.0.12:*:*:*:*:mongodb:*:*","cpe:2.3:a:mongodb:mongocryptd:5.0.13:*:*:*:*:mongodb:*:*","cpe:2.3:a:mongodb:mongocryptd:5.0.14:*:*:*:*:mongodb:*:*","cpe:2.3:a:mongodb:mongocryptd:5.0.15:*:*:*:*:mongodb:*:*","cpe:2.3:a:mongodb:mongocryptd:5.0.16:*:*:*:*:mongodb:*:*","cpe:2.3:a:mongodb:mongocryptd:5.0.17:*:*:*:*:mongodb:*:*","cpe:2.3:a:mongodb:mongocryptd:5.0.18:*:*:*:*:mongodb:*:*","cpe:2.3:a:mongodb:mongocryptd:5.0.19:*:*:*:*:mongodb:*:*","cpe:2.3:a:mongodb:mongocryptd:5.0.20:*:*:*:*:mongodb:*:*","cpe:2.3:a:mongodb:mongocryptd:5.0.21:*:*:*:*:mongodb:*:*","cpe:2.3:a:mongodb:mongocryptd:5.0.22:*:*:*:*:mongodb:*:*","cpe:2.3:a:mongodb:mongocryptd:5.0.23:*:*:*:*:mongodb:*:*","cpe:2.3:a:mongodb:mongocryptd:5.0.24:*:*:*:*:mongodb:*:*","cpe:2.3:a:mongodb:mongocryptd:5.0.25:*:*:*:*:mongodb:*:*","cpe:2.3:a:mongodb:mongocryptd:5.0.26:*:*:*:*:mongodb:*:*","cpe:2.3:a:mongodb:mongocryptd:5.0.27:*:*:*:*:mongodb:*:*","cpe:2.3:a:mongodb:mongocryptd:5.0.28:*:*:*:*:mongodb:*:*","cpe:2.3:a:mongodb:mongocryptd:6.0.0:*:*:*:*:mongodb:*:*","cpe:2.3:a:mongodb:mongocryptd:6.0.1:*:*:*:*:mongodb:*:*","cpe:2.3:a:mongodb:mongocryptd:6.0.2:*:*:*:*:mongodb:*:*","cpe:2.3:a:mongodb:mongocryptd:6.0.3:*:*:*:*:mongodb:*:*","cpe:2.3:a:mongodb:mongocryptd:6.0.4:*:*:*:*:mongodb:*:*","cpe:2.3:a:mongodb:mongocryptd:6.0.5:*:*:*:*:mongodb:*:*","cpe:2.3:a:mongodb:mongocryptd:6.0.6:*:*:*:*:mongodb:*:*","cpe:2.3:a:mongodb:mongocryptd:6.0.7:*:*:*:*:mongodb:*:*","cpe:2.3:a:mongodb:mongocryptd:6.0.8:*:*:*:*:mongodb:*:*","cpe:2.3:a:mongodb:mongocryptd:6.0.9:*:*:*:*:mongodb:*:*","cpe:2.3:a:mongodb:mongocryptd:6.0.10:*:*:*:*:mongodb:*:*","cpe:2.3:a:mongodb:mongocryptd:6.0.11:*:*:*:*:mongodb:*:*","cpe:2.3:a:mongodb:mongocryptd:6.0.12:*:*:*:*:mongodb:*:*","cpe:2.3:a:mongodb:mongocryptd:6.0.13:*:*:*:*:mongodb:*:*","cpe:2.3:a:mongodb:mongocryptd:6.0.14:*:*:*:*:mongodb:*:*","cpe:2.3:a:mongodb:mongocryptd:6.0.15:*:*:*:*:mongodb:*:*","cpe:2.3:a:mongodb:mongocryptd:6.0.16:*:*:*:*:mongodb:*:*","cpe:2.3:a:mongodb:mongocryptd:7.0.0:*:*:*:*:mongodb:*:*","cpe:2.3:a:mongodb:mongocryptd:7.0.1:*:*:*:*:mongodb:*:*","cpe:2.3:a:mongodb:mongocryptd:7.0.2:*:*:*:*:mongodb:*:*","cpe:2.3:a:mongodb:mongocryptd:7.0.3:*:*:*:*:mongodb:*:*","cpe:2.3:a:mongodb:mongocryptd:7.0.4:*:*:*:*:mongodb:*:*","cpe:2.3:a:mongodb:mongocryptd:7.0.5:*:*:*:*:mongodb:*:*","cpe:2.3:a:mongodb:mongocryptd:7.0.6:*:*:*:*:mongodb:*:*","cpe:2.3:a:mongodb:mongocryptd:7.0.7:*:*:*:*:mongodb:*:*","cpe:2.3:a:mongodb:mongocryptd:7.0.8:*:*:*:*:mongodb:*:*","cpe:2.3:a:mongodb:mongocryptd:7.0.9:*:*:*:*:mongodb:*:*","cpe:2.3:a:mongodb:mongocryptd:7.0.10:*:*:*:*:mongodb:*:*","cpe:2.3:a:mongodb:mongocryptd:7.0.11:*:*:*:*:mongodb:*:*","cpe:2.3:a:mongodb:mongocryptd:7.3.0:*:*:*:*:mongodb:*:*","cpe:2.3:a:mongodb:mongocryptd:7.3.1:*:*:*:*:mongodb:*:*","cpe:2.3:a:mongodb:mongocryptd:7.3.2:*:*:*:*:mongodb:*:*","cpe:2.3:a:mongodb:mongocryptd:7.3.3:*:*:*:*:mongodb:*:*"],"versions":[{"version":"5.0","lessThan":"5.0.29","versionType":"custom","status":"affected"},{"version":"6.0","lessThan":"6.0.17","versionType":"custom","status":"affected"},{"version":"7.0","lessThan":"7.012","versionType":"custom","status":"affected"},{"version":"7.3","lessThan":"7.3.4","versionType":"custom","status":"affected"}]},{"vendor":"MongoDB Inc","product":"Mongo_crypt_v1.so","defaultStatus":"unaffected","versions":[{"version":"6.0","lessThan":"6.0.17","versionType":"custom","status":"affected"},{"version":"7.0","lessThan":"7.0.12","versionType":"custom","status":"affected"},{"version":"7.3","lessThan":"7.3.4","versionType":"custom","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"cna@mongodb.com","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:U/C:L/I:N/A:N","baseScore":2.2,"baseSeverity":"LOW","attackVector":"LOCAL","attackComplexity":"HIGH","privilegesRequired":"LOW","userInteraction":"REQUIRED","scope":"UNCHANGED","confidentialityImpact":"LOW","integrityImpact":"NONE","availabilityImpact":"NONE"},"exploitabilityScore":0.8,"impactScore":1.4},{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N","baseScore":3.3,"baseSeverity":"LOW","attackVector":"LOCAL","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"LOW","integrityImpact":"NONE","availabilityImpact":"NONE"},"exploitabilityScore":1.8,"impactScore":1.4}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2024-10-28T13:39:18.972061Z","id":"CVE-2024-8013","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"partial"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"cna@mongodb.com","type":"Secondary","description":[{"lang":"en","value":"CWE-319"}]},{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-319"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:mongodb:mongo_crypt_v1.so:*:*:*:*:*:mongodb:*:*","versionStartIncluding":"6.0.0","versionEndExcluding":"6.0.17","matchCriteriaId":"4F0AB171-D947-49C0-9316-7F9E24EA043D"},{"vulnerable":true,"criteria":"cpe:2.3:a:mongodb:mongo_crypt_v1.so:*:*:*:*:*:mongodb:*:*","versionStartIncluding":"7.0.0","versionEndExcluding":"7.0.12","matchCriteriaId":"8212FEB4-CBC2-467F-9481-B5732508F2A1"},{"vulnerable":true,"criteria":"cpe:2.3:a:mongodb:mongo_crypt_v1.so:*:*:*:*:*:mongodb:*:*","versionStartIncluding":"7.3.0","versionEndExcluding":"7.3.4","matchCriteriaId":"F532507C-3BFE-4572-BFF9-231660EF723C"},{"vulnerable":true,"criteria":"cpe:2.3:a:mongodb:mongocryptd:*:*:*:*:*:mongodb:*:*","versionStartIncluding":"5.0.0","versionEndExcluding":"5.0.29","matchCriteriaId":"DAEF92CF-08B5-4856-A435-6DB3B55C2CD7"},{"vulnerable":true,"criteria":"cpe:2.3:a:mongodb:mongocryptd:*:*:*:*:*:mongodb:*:*","versionStartIncluding":"6.0.0","versionEndExcluding":"6.0.17","matchCriteriaId":"49E86F43-2733-48AB-AA5F-48F52039F01C"},{"vulnerable":true,"criteria":"cpe:2.3:a:mongodb:mongocryptd:*:*:*:*:*:mongodb:*:*","versionStartIncluding":"7.0.0","versionEndExcluding":"7.0.12","matchCriteriaId":"E2808417-A762-4018-AF46-699F6F07B9E4"},{"vulnerable":true,"criteria":"cpe:2.3:a:mongodb:mongocryptd:*:*:*:*:*:mongodb:*:*","versionStartIncluding":"7.3.0","versionEndExcluding":"7.3.4","matchCriteriaId":"AC25FA9D-AC61-4795-8B8C-8578F1DE6B2C"}]}]}],"references":[{"url":"https://jira.mongodb.org/browse/SERVER-96254","source":"cna@mongodb.com","tags":["Vendor Advisory"]}]}}]}