CVE-2024-8013

CSFLE and Queryable Encryption self-lookup may fail to encrypt values in subpipelines

Published Oct 28, 2024 CVSS 3.1 · 2.2 Low EPSS < 1% KEV · Not listed

Description

A bug in query analysis of certain complex self-referential $lookup subpipelines may result in literal values in expressions for encrypted fields to be sent to the server as plaintext instead of ciphertext. Should this occur, no documents would be returned or written. This issue affects mongocryptd binary (v5.0 versions prior to 5.0.29, v6.0 versions prior to 6.0.17, v7.0 versions prior to 7.0.12 and v7.3 versions prior to 7.3.4) and mongo_crypt_v1.so shared libraries (v6.0 versions prior to 6.0.17, v7.0 versions prior to 7.0.12 and v7.3 versions prior to 7.3.4) released alongside MongoDB Enterprise Server versions.

Affected Products

Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).

Vendor Product Default status Versions

MongoDB Inc

mongocryptd

unaffected

Version	Status	Constraints
`5.0`	affected	< 5.0.29
`6.0`	affected	< 6.0.17
`7.0`	affected	< 7.012
`7.3`	affected	< 7.3.4

MongoDB Inc

Mongo_crypt_v1.so

unaffected

Version	Status	Constraints
`6.0`	affected	< 6.0.17
`7.0`	affected	< 7.0.12
`7.3`	affected	< 7.3.4

Configuration 1 [-]

OR	cpe:2.3:a:mongodb:mongo_crypt_v1.so::::::mongodb::*
	cpe:2.3:a:mongodb:mongo_crypt_v1.so::::::mongodb::*
	cpe:2.3:a:mongodb:mongo_crypt_v1.so::::::mongodb::*
	cpe:2.3:a:mongodb:mongocryptd::::::mongodb::*
	cpe:2.3:a:mongodb:mongocryptd::::::mongodb::*
	cpe:2.3:a:mongodb:mongocryptd::::::mongodb::*
	cpe:2.3:a:mongodb:mongocryptd::::::mongodb::*

No data.

No data available yet.

Remediation

No solution or workaround provided in the CVE record

Tracking

Advisories

Source	ID	Title
EUVD	EUVD-2024-48885	A bug in query analysis of certain complex self-referential $lookup subpipelines may result in literal values in expressions for encrypted fields to be sent to the server as plaintext instead of ciphertext. Should this occur, no documents would be returned or written. This issue affects mongocryptd binary (v5.0 versions prior to 5.0.29, v6.0 versions prior to 6.0.17, v7.0 versions prior to 7.0.12 and v7.3 versions prior to 7.3.4) and mongo_crypt_v1.so shared libraries (v6.0 versions prior to 6.0.17, v7.0 versions prior to 7.0.12 and v7.3 versions prior to 7.3.4) released alongside MongoDB Enterprise Server versions.

Metrics

No CVSS v4.0

Attack Vector Local

Attack Complexity High

Privileges Required Low

Scope Unchanged

Confidentiality Impact Low

Integrity Impact None

Availability Impact None

User Interaction Required

No CVSS v3.0

No CVSS v2

This CVE is not in the KEV list.

Exploit prediction score: < 1% (0.120% probability within 30 days)

Exploitation none

Automatable no

Technical Impact partial

References

Link	Providers
https://jira.mongodb.org/browse/SERVER-96254

History

Jul 14, 2025 1:45 PM Scoring metrics updated View changes

Type	Values Removed	Values Added
Metrics	epss `{'score': 0.00012}`	epss `{'score': 0.00014}`

Oct 31, 2024 2:00 PM Affected versions updated View changes

Type	Values Removed	Values Added
CPEs		cpe:2.3:a:mongodb:mongo_crypt_v1.so::::::mongodb::* cpe:2.3:a:mongodb:mongocryptd::::::mongodb::*

Oct 28, 2024 2:15 PM Scoring metrics updated View changes

Type	Values Removed	Values Added
Metrics		ssvc `{'options': {'Automatable': 'no', 'Exploitation': 'none', 'Technical Impact': 'partial'}, 'version': '2.0.3'}`

Oct 28, 2024 1:15 PM Description updated. Title updated. First appearance in the feed. Weaknesses updated. Affected versions updated. Affected vendors updated. Added references. Scoring metrics updated View changes

Type	Values Removed	Values Added
Description		A bug in query analysis of certain complex self-referential $lookup subpipelines may result in literal values in expressions for encrypted fields to be sent to the server as plaintext instead of ciphertext. Should this occur, no documents would be returned or written. This issue affects mongocryptd binary (v5.0 versions prior to 5.0.29, v6.0 versions prior to 6.0.17, v7.0 versions prior to 7.0.12 and v7.3 versions prior to 7.3.4) and mongo_crypt_v1.so shared libraries (v6.0 versions prior to 6.0.17, v7.0 versions prior to 7.0.12 and v7.3 versions prior to 7.3.4) released alongside MongoDB Enterprise Server versions.
Title		CSFLE and Queryable Encryption self-lookup may fail to encrypt values in subpipelines
First Time appeared		Mongodb Mongodb mongo Crypt V1.so Mongodb mongocryptd
Weaknesses		CWE-319
CPEs		cpe:2.3:a:mongodb:mongo_crypt_v1.so:6.0.0:::::mongodb:: cpe:2.3:a:mongodb:mongo_crypt_v1.so:6.0.10:::::mongodb:: cpe:2.3:a:mongodb:mongo_crypt_v1.so:6.0.11:::::mongodb:: cpe:2.3:a:mongodb:mongo_crypt_v1.so:6.0.12:::::mongodb:: cpe:2.3:a:mongodb:mongo_crypt_v1.so:6.0.13:::::mongodb:: cpe:2.3:a:mongodb:mongo_crypt_v1.so:6.0.14:::::mongodb:: cpe:2.3:a:mongodb:mongo_crypt_v1.so:6.0.15:::::mongodb:: cpe:2.3:a:mongodb:mongo_crypt_v1.so:6.0.16:::::mongodb:: cpe:2.3:a:mongodb:mongo_crypt_v1.so:6.0.1:::::mongodb:: cpe:2.3:a:mongodb:mongo_crypt_v1.so:6.0.2:::::mongodb:: cpe:2.3:a:mongodb:mongo_crypt_v1.so:6.0.3:::::mongodb:: cpe:2.3:a:mongodb:mongo_crypt_v1.so:6.0.4:::::mongodb:: cpe:2.3:a:mongodb:mongo_crypt_v1.so:6.0.5:::::mongodb:: cpe:2.3:a:mongodb:mongo_crypt_v1.so:6.0.6:::::mongodb:: cpe:2.3:a:mongodb:mongo_crypt_v1.so:6.0.7:::::mongodb:: cpe:2.3:a:mongodb:mongo_crypt_v1.so:6.0.8:::::mongodb:: cpe:2.3:a:mongodb:mongo_crypt_v1.so:6.0.9:::::mongodb:: cpe:2.3:a:mongodb:mongo_crypt_v1.so:7.0.0:::::mongodb:: cpe:2.3:a:mongodb:mongo_crypt_v1.so:7.0.10:::::mongodb:: cpe:2.3:a:mongodb:mongo_crypt_v1.so:7.0.11:::::mongodb:: cpe:2.3:a:mongodb:mongo_crypt_v1.so:7.0.1:::::mongodb:: cpe:2.3:a:mongodb:mongo_crypt_v1.so:7.0.2:::::mongodb:: cpe:2.3:a:mongodb:mongo_crypt_v1.so:7.0.3:::::mongodb:: cpe:2.3:a:mongodb:mongo_crypt_v1.so:7.0.4:::::mongodb:: cpe:2.3:a:mongodb:mongo_crypt_v1.so:7.0.5:::::mongodb:: cpe:2.3:a:mongodb:mongo_crypt_v1.so:7.0.6:::::mongodb:: cpe:2.3:a:mongodb:mongo_crypt_v1.so:7.0.7:::::mongodb:: cpe:2.3:a:mongodb:mongo_crypt_v1.so:7.0.8:::::mongodb:: cpe:2.3:a:mongodb:mongo_crypt_v1.so:7.0.9:::::mongodb:: cpe:2.3:a:mongodb:mongo_crypt_v1.so:7.3.0:::::mongodb:: cpe:2.3:a:mongodb:mongo_crypt_v1.so:7.3.1:::::mongodb:: cpe:2.3:a:mongodb:mongo_crypt_v1.so:7.3.2:::::mongodb:: cpe:2.3:a:mongodb:mongo_crypt_v1.so:7.3.3:::::mongodb:: cpe:2.3:a:mongodb:mongocryptd:5.0.0:::::mongodb:: cpe:2.3:a:mongodb:mongocryptd:5.0.10:::::mongodb:: cpe:2.3:a:mongodb:mongocryptd:5.0.11:::::mongodb:: cpe:2.3:a:mongodb:mongocryptd:5.0.12:::::mongodb:: cpe:2.3:a:mongodb:mongocryptd:5.0.13:::::mongodb:: cpe:2.3:a:mongodb:mongocryptd:5.0.14:::::mongodb:: cpe:2.3:a:mongodb:mongocryptd:5.0.15:::::mongodb:: cpe:2.3:a:mongodb:mongocryptd:5.0.16:::::mongodb:: cpe:2.3:a:mongodb:mongocryptd:5.0.17:::::mongodb:: cpe:2.3:a:mongodb:mongocryptd:5.0.18:::::mongodb:: cpe:2.3:a:mongodb:mongocryptd:5.0.19:::::mongodb:: cpe:2.3:a:mongodb:mongocryptd:5.0.1:::::mongodb:: cpe:2.3:a:mongodb:mongocryptd:5.0.20:::::mongodb:: cpe:2.3:a:mongodb:mongocryptd:5.0.21:::::mongodb:: cpe:2.3:a:mongodb:mongocryptd:5.0.22:::::mongodb:: cpe:2.3:a:mongodb:mongocryptd:5.0.23:::::mongodb:: cpe:2.3:a:mongodb:mongocryptd:5.0.24:::::mongodb:: cpe:2.3:a:mongodb:mongocryptd:5.0.25:::::mongodb:: cpe:2.3:a:mongodb:mongocryptd:5.0.26:::::mongodb:: cpe:2.3:a:mongodb:mongocryptd:5.0.27:::::mongodb:: cpe:2.3:a:mongodb:mongocryptd:5.0.28:::::mongodb:: cpe:2.3:a:mongodb:mongocryptd:5.0.2:::::mongodb:: cpe:2.3:a:mongodb:mongocryptd:5.0.3:::::mongodb:: cpe:2.3:a:mongodb:mongocryptd:5.0.4:::::mongodb:: cpe:2.3:a:mongodb:mongocryptd:5.0.5:::::mongodb:: cpe:2.3:a:mongodb:mongocryptd:5.0.6:::::mongodb:: cpe:2.3:a:mongodb:mongocryptd:5.0.7:::::mongodb:: cpe:2.3:a:mongodb:mongocryptd:5.0.8:::::mongodb:: cpe:2.3:a:mongodb:mongocryptd:5.0.9:::::mongodb:: cpe:2.3:a:mongodb:mongocryptd:6.0.0:::::mongodb:: cpe:2.3:a:mongodb:mongocryptd:6.0.10:::::mongodb:: cpe:2.3:a:mongodb:mongocryptd:6.0.11:::::mongodb:: cpe:2.3:a:mongodb:mongocryptd:6.0.12:::::mongodb:: cpe:2.3:a:mongodb:mongocryptd:6.0.13:::::mongodb:: cpe:2.3:a:mongodb:mongocryptd:6.0.14:::::mongodb:: cpe:2.3:a:mongodb:mongocryptd:6.0.15:::::mongodb:: cpe:2.3:a:mongodb:mongocryptd:6.0.16:::::mongodb:: cpe:2.3:a:mongodb:mongocryptd:6.0.1:::::mongodb:: cpe:2.3:a:mongodb:mongocryptd:6.0.2:::::mongodb:: cpe:2.3:a:mongodb:mongocryptd:6.0.3:::::mongodb:: cpe:2.3:a:mongodb:mongocryptd:6.0.4:::::mongodb:: cpe:2.3:a:mongodb:mongocryptd:6.0.5:::::mongodb:: cpe:2.3:a:mongodb:mongocryptd:6.0.6:::::mongodb:: cpe:2.3:a:mongodb:mongocryptd:6.0.7:::::mongodb:: cpe:2.3:a:mongodb:mongocryptd:6.0.8:::::mongodb:: cpe:2.3:a:mongodb:mongocryptd:6.0.9:::::mongodb:: cpe:2.3:a:mongodb:mongocryptd:7.0.0:::::mongodb:: cpe:2.3:a:mongodb:mongocryptd:7.0.10:::::mongodb:: cpe:2.3:a:mongodb:mongocryptd:7.0.11:::::mongodb:: cpe:2.3:a:mongodb:mongocryptd:7.0.1:::::mongodb:: cpe:2.3:a:mongodb:mongocryptd:7.0.2:::::mongodb:: cpe:2.3:a:mongodb:mongocryptd:7.0.3:::::mongodb:: cpe:2.3:a:mongodb:mongocryptd:7.0.4:::::mongodb:: cpe:2.3:a:mongodb:mongocryptd:7.0.5:::::mongodb:: cpe:2.3:a:mongodb:mongocryptd:7.0.6:::::mongodb:: cpe:2.3:a:mongodb:mongocryptd:7.0.7:::::mongodb:: cpe:2.3:a:mongodb:mongocryptd:7.0.8:::::mongodb:: cpe:2.3:a:mongodb:mongocryptd:7.0.9:::::mongodb:: cpe:2.3:a:mongodb:mongocryptd:7.3.0:::::mongodb:: cpe:2.3:a:mongodb:mongocryptd:7.3.1:::::mongodb:: cpe:2.3:a:mongodb:mongocryptd:7.3.2:::::mongodb:: cpe:2.3:a:mongodb:mongocryptd:7.3.3:::::mongodb::
Vendors & Products		Mongodb Mongodb mongo Crypt V1.so Mongodb mongocryptd
References		https://jira.mongodb.org/browse/SERVER-96254
Metrics		cvssV3_1 `{'score': 2.2, 'vector': 'CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:U/C:L/I:N/A:N'}`