Mongo Bleed Detector
Summary: PortSwigger lists a Burp extension, MongoBleed Detector, that tests for CVE-2025-14847, a memory leak vulnerability in MongoDB, by running manual connection tests from a dedicated UI tab. The extension connects to a specified host and port, captures leaked memory data across a configurable byte offset range, and displays the results for inspection.
Key Takeaway: A memory leak in MongoDB that exposes process memory to whoever connects is a data-exposure path that sits below the application layer, and this detector only finds it if someone points it at the host and port and reads the captured bytes.
Read the original at PortSwigger Research ↗
- Topics
- Vulnerabilities & Patching
- Mentions
- CVE-2025-14847
- Related
- CVE-2025-14847: MongoDB and MongoDB Server Improper Handling of Length Parameter Inconsistency Vulnerability Known Exploited Vulnerabilities · Dec 29, 2025Threat Brief: MongoDB Vulnerability (CVE-2025-14847) Cyber Risks ·Attackers Exploit UnrealIRCd Flaw That Enables Server-Level Command Injection Cyber Risks · Nov 14, 2026