Node Js Driver
Monthly
Response mispairing in the MongoDB Node.js driver can return one request's database reply to a different request, potentially disclosing other users' records and producing incorrect results or failed legitimate requests when an application enables the optional client-side operation timeout. An unauthenticated remote party able to send ordinary requests through such an application can trigger the condition, but exploitation is opportunistic and timing-dependent because an earlier operation must time out and leave data outstanding on a pooled connection. No public exploit or active exploitation is identified in the available data, and the decision label is this_week rather than emergency.
Response mispairing in the MongoDB Node.js driver can return one request's database reply to a different request, potentially disclosing other users' records and producing incorrect results or failed legitimate requests when an application enables the optional client-side operation timeout. An unauthenticated remote party able to send ordinary requests through such an application can trigger the condition, but exploitation is opportunistic and timing-dependent because an earlier operation must time out and leave data outstanding on a pooled connection. No public exploit or active exploitation is identified in the available data, and the decision label is this_week rather than emergency.