Guidance for CVE-2023-43651 & CVE-2021-32050

Hello There,

can anyone help me to check where to check package version in mongodb

I want to check below driver version
for CVE-2021-32050
MongoDB C Driver 1.0.0 prior to 1.17.7, MongoDB PHP Driver 1.0.0 prior to 1.9.2, MongoDB Swift Driver 1.0.0 prior to 1.1.1, MongoDB Node.js Driver 3.6 prior to 3.6.10, MongoDB Node.js Driver 4.0 prior to 4.17.0 and MongoDB Node.js Driver 5.0 prior to 5.8.0. This issue also affects users of the MongoDB C++ Driver dependent on the C driver 1.0.0 prior to 1.17.7 (C++ driver prior to 3.7.0).

also help in CVE-2023-43651

Regards,
SAM

Hey @sameer_khamkar,

also help in CVE-2023-43651

CVE-2023-43651 appears to be a CVE for jumpserver.

I want to check below driver version
for CVE-2021-32050

As for CVE-2021-32050, it would depend on what language you’re specifically interested in. For example, if you have a Node.js application you can check the package.json or package-lock.json to see what version of the mongodb package is installed.

2 Likes

The mongod server logs and $currentOp

Can be used to get an idea of what driver version has previously and is currently connected to your cluster if you don’t have access to the code or wish to supplement that information.

1 Like

Thank you @alexbevi for your guidance

Thank you @chris for your guidance

1 Like