CVE-2013-4650

CVE-2013-4650 describes a privilege escalation vulnerability in MongoDB versions 2.4.x before 2.4.5 and 2.5.x before 2.5.1. Authenticated attackers can exploit this flaw by using the reserved username "__system" in any database to gain internal system privileges. With a CVSS score of 6.5, this vulnerability is moderately severe, allowing remote attackers with authentication to achieve partial confidentiality, integrity, and availability impacts with low attack complexity. There is no evidence of active exploitation, and no public exploit code (Metasploit, Nuclei, ExploitDB) is available. While there's limited community discussion and media coverage, it's not listed on the CISA KEV catalog or Hot List, suggesting low current threat activity.