CVE-2024-6384: MongoDB

Medium severity, CVSS 5.3. EPSS: 0.4% chance of exploitation in the next 30 days.

"Hot" backup files may be downloaded by underprivileged users, if they are capable of acquiring a unique backup identifier. This issue affects MongoDB Enterprise Server v6.0 versions prior to 6.0.16, MongoDB Enterprise Server v7.0 versions prior to 7.0.11 and MongoDB Enterprise Server v7.3 versions prior to 7.3.3

Affected products

• MongoDB MongoDB: from 6.0.0, before 6.0.16 (fixed in 6.0.16); from 7.0.0, before 7.0.11 (fixed in 7.0.11); from 7.3.0, before 7.3.3 (fixed in 7.3.3)

Published 2024-08-13. Last modified 2026-06-17.