Ein vorzeitiges Ende der Feiertage: „Heartbleed of MongoDB“ wird jetzt aktiv ausgenutzt
https://www.theregister.com/2025/12/30/mongodb_vuln_exploited_cve_2025_14847/
Ein vorzeitiges Ende der Feiertage: „Heartbleed of MongoDB“ wird jetzt aktiv ausgenutzt
https://www.theregister.com/2025/12/30/mongodb_vuln_exploited_cve_2025_14847/
1 Kommentar
>Dubbed MongoBleed by the Elastic Security researcher who published a proof of concept on December 26, the vulnerability was actually identified back on December 15 and patched by the MongoDB crew shortly thereafter. It affects a wide range of MongoDB Server versions, with MongoDB urging affected users to upgrade to fixed releases immediately.
>“If you cannot upgrade immediately, disable zlib compression on the MongoDB Server,“ the MongoDB maker urged.
So no big deal.