[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$f7MAfkxWkSCPjiaSxvLggsO7Sd62gDFbfNR_VzZxEkRc":3,"g5a-risk:CVE-2023-0437":123},{"success":4,"data":5,"meta":120},true,{"cveId":6,"title":7,"description":8,"shortDescription":9,"publishedDate":10,"lastModified":11,"cvssScore":12,"cvssVector":13,"cvssMetrics":14,"epssScore":40,"epssPercentile":28,"epssTimeSeries":41,"severity":42,"affectedProducts":43,"affectedProductsCount":49,"references":50,"referencesCount":72,"weaknesses":73,"weaknessesCount":49,"isActivelyExploited":82,"cisaInfo":28,"otxData":28,"relatedBlogPosts":83,"seoMetadata":84,"configurations":109,"relatedVendorCves":118,"notableEvents":119},"CVE-2023-0437","What is CVE-2023-0437?","When calling bson_utf8_validate on some inputs a loop with an exit condition that cannot be reached may occur, i.e. an infinite loop. This issue affects All MongoDB C Driver versions prior to versions 1.25.0.","When calling bson_utf8_validate on some inputs a loop with an exit condition that cannot be reached may occur, i.e. an infinite loop. This issue affects All ...","2024-01-12T14:15:47.387","2026-06-17T05:25:33.043",7.5,"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:N\u002FS:U\u002FC:N\u002FI:N\u002FA:H",{"CVSSMetricV31":15,"CVSSMetricV30":37,"CVSSMetricV2":38,"CVSSMetricV40":39},[16,31],{"Source":17,"Type":18,"CVSSData":19,"ExploitabilityScore":29,"ImpactScore":30},"cna@mongodb.com","Secondary",{"Version":20,"VectorString":21,"AttackVector":22,"AttackComplexity":23,"PrivilegesRequired":24,"UserInteraction":24,"Scope":25,"ConfidentialityImpact":24,"IntegrityImpact":24,"AvailabilityImpact":23,"BaseScore":26,"BaseSeverity":27,"ExploitCodeMaturity":28,"RemediationLevel":28,"ReportConfidence":28,"TemporalScore":28,"TemporalSeverity":28,"ConfidentialityRequirement":28,"IntegrityRequirement":28,"AvailabilityRequirement":28,"ModifiedAttackVector":28,"ModifiedAttackComplexity":28,"ModifiedPrivilegesRequired":28,"ModifiedUserInteraction":28,"ModifiedScope":28,"ModifiedConfidentialityImpact":28,"ModifiedIntegrityImpact":28,"ModifiedAvailabilityImpact":28,"EnvironmentalScore":28,"EnvironmentalSeverity":28},"3.1","CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:N\u002FS:U\u002FC:N\u002FI:N\u002FA:L","NETWORK","LOW","NONE","UNCHANGED",5.3,"MEDIUM",null,3.9,1.4,{"Source":32,"Type":33,"CVSSData":34,"ExploitabilityScore":29,"ImpactScore":36},"nvd@nist.gov","Primary",{"Version":20,"VectorString":13,"AttackVector":22,"AttackComplexity":23,"PrivilegesRequired":24,"UserInteraction":24,"Scope":25,"ConfidentialityImpact":24,"IntegrityImpact":24,"AvailabilityImpact":35,"BaseScore":12,"BaseSeverity":35,"ExploitCodeMaturity":28,"RemediationLevel":28,"ReportConfidence":28,"TemporalScore":28,"TemporalSeverity":28,"ConfidentialityRequirement":28,"IntegrityRequirement":28,"AvailabilityRequirement":28,"ModifiedAttackVector":28,"ModifiedAttackComplexity":28,"ModifiedPrivilegesRequired":28,"ModifiedUserInteraction":28,"ModifiedScope":28,"ModifiedConfidentialityImpact":28,"ModifiedIntegrityImpact":28,"ModifiedAvailabilityImpact":28,"EnvironmentalScore":28,"EnvironmentalSeverity":28},"HIGH",3.6,[],[],[],0.01103,[40,40,40,40,40,40,40],"High",[44],{"vendor":45,"product":46,"version":47,"criteria":48,"vulnerable":4},"mongodb","c_driver","*","cpe:2.3:a:mongodb:c_driver:*:*:*:*:*:mongodb:*:*",1,[51,57,61,63,67,70],{"url":52,"source":53,"tags":54},"https:\u002F\u002Fjira.mongodb.org\u002Fbrowse\u002FCDRIVER-4747","Mongodb",[55,56],"Issue Tracking","Vendor Advisory",{"url":58,"source":59,"tags":60},"https:\u002F\u002Flists.fedoraproject.org\u002Farchives\u002Flist\u002Fpackage-announce@lists.fedoraproject.org\u002Fmessage\u002F7GUVOAFZFSYTNBF6R7H4XJM5DHWBRQ6P\u002F","Fedoraproject",[],{"url":52,"source":53,"tags":62},[55,56],{"url":64,"source":65,"tags":66},"https:\u002F\u002Flists.debian.org\u002Fdebian-lts-announce\u002F2025\u002F05\u002Fmsg00012.html","Debian",[],{"url":68,"source":65,"tags":69},"https:\u002F\u002Flists.debian.org\u002Fdebian-lts-announce\u002F2025\u002F05\u002Fmsg00027.html",[],{"url":58,"source":59,"tags":71},[],6,[74],{"id":75,"name":76,"description":77,"extendedDescription":78,"status":79,"abstraction":80,"structure":81},"CWE-835","Loop with Unreachable Exit Condition ('Infinite Loop')","The product contains an iteration or loop with an exit condition that cannot be reached, i.e., an infinite loop.","If the loop can be influenced by an attacker, this weakness could allow attackers to consume excessive resources such as CPU or memory.","Incomplete","Base","Simple",false,[],{"title":85,"metaDescription":86,"keywords":87,"canonicalUrl":88,"structuredData":89},"What is CVE-2023-0437? Vulnerability Analysis | Security Advisory | Precursor Intelligence","Comprehensive analysis of CVE-2023-0437, a high severity cyber security vulnerability from 2024. When calling bson_utf8_validate on some inputs a loop with a...","CVE-2023-0437, CVE-2023-0437 vulnerability, CVE-2023-0437 security, high severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research, vulnerability assessment, cyber threats, 2024, CVSS score, exploit, patch, remediation, mongodb security, c_driver vulnerability","\u002Fwhat-is\u002Fcve-2023-0437",{"@context":90,"@type":91,"headline":85,"description":86,"datePublished":10,"dateModified":11,"author":92,"publisher":96,"about":100,"mainEntityOfPage":104,"articleSection":107,"keywords":108},"https:\u002F\u002Fschema.org","TechArticle",{"@type":93,"name":94,"url":95},"Organization","Precursor Intelligence","https:\u002F\u002Fprecursorintelligence.com",{"@type":93,"name":94,"url":95,"logo":97},{"@type":98,"url":99},"ImageObject","https:\u002F\u002Fprecursorintelligence.com\u002Fimg\u002Flogos\u002Feplogo.png",{"@type":101,"name":6,"description":102,"additionalType":103},"Thing","Cybersecurity Vulnerability","https:\u002F\u002Fschema.org\u002FSoftwareBug",{"@type":105,"@id":106},"WebPage","https:\u002F\u002Fprecursorintelligence.com\u002Fwhat-is\u002Fcve-2023-0437","Cybersecurity","CVE-2023-0437, CVE-2023-0437 vulnerability, CVE-2023-0437 security, high severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research",[110],{"Operator":28,"Negate":28,"Nodes":111},[112],{"Operator":113,"Negate":82,"CPEMatch":114},"OR",[115],{"Vulnerable":4,"Criteria":48,"MatchCriteriaID":116,"VersionStartExcluding":28,"VersionStartIncluding":28,"VersionEndExcluding":117,"VersionEndIncluding":28},"82F06E2D-CEA4-4506-A89D-50D8E6551222","1.25.0",[],[],{"lastModified":11,"cacheTime":121,"version":122},1792192406424,"2.0",{"score":124,"band":125,"action":126,"scoredAt":127},47,"Medium","Plan remediation","2026-10-16T07:00:28.485203+00:00"]