{"id":86539,"date":"2026-02-24T06:27:41","date_gmt":"2026-02-24T06:27:41","guid":{"rendered":""},"modified":"-0001-11-30T00:00:00","modified_gmt":"-0001-11-30T06:00:00","slug":"cve-2025-6709-denial-of-service-vulnerability-in-mongodb-server-due-to-improper-date-value-handling","status":"publish","type":"post","link":"https:\/\/www.ameeba.com\/blog\/cve-2025-6709-denial-of-service-vulnerability-in-mongodb-server-due-to-improper-date-value-handling\/","title":{"rendered":"CVE-2025-6709: Denial of Service Vulnerability in MongoDB Server Due to Improper Date Value Handling<\/strong>"},"content":{"rendered":"

Overview<\/strong><\/p>\n

This report analyzes a critical vulnerability identified as CVE-2025-6709 in the MongoDB Server. The vulnerability exposes systems to a potential denial of service attack and potentially allows for system compromise or data leakage. It arises from improper handling of specific date values in JSON input when using OIDC authentication, affecting multiple versions of MongoDB Server. Understanding this vulnerability is crucial for system administrators and security professionals to ensure the safety of their MongoDB installations.<\/p>\n

Vulnerability Summary<\/strong><\/p>\n

CVE ID: CVE-2025-6709
\nSeverity: High (7.5 CVSS Score)
\nAttack Vector: Network
\nPrivileges Required: Low for v7.0 and v8.0 versions, High for v6.0 versions
\nUser Interaction: None
\nImpact: Denial of Service leading to potential system compromise or data leakage<\/p>\n

Affected Products<\/strong><\/p>

\r\n

\r\n \r\n \"Ameeba\r\n <\/a>\r\n A new way to communicate\r\n <\/h2>\r\n\r\n

\r\n Ameeba Chat is built on encrypted identity, not personal profiles.\r\n <\/p>\r\n\r\n

\r\n Message, call, share files, and coordinate with identities kept separate.\r\n <\/p>\r\n\r\n