ID:12297 - Exploit for Improper Handling of Length Parameter Inconsistency in MongoDB - CVE-2025-14847

Link to public exploit:

Vulnerability description

The vulnerability allows a remote attacker to gain access to sensitive information.

The vulnerability exists due to mismatched length fields in Zlib compressed protocol headers. A remote non-authenticated client can read parts of uninitialized heap memory and gain access to sensitive information. 

Remediation