<!-- 
RSS generated by JIRA (9.7.1#970001-sha1:2222b88b221c4928ef0de3161136cc90c8356a66) at Thu Feb 08 04:42:34 UTC 2024

It is possible to restrict the fields that are returned in this document by specifying the 'field' parameter in your request.
For example, to request only the issue key and summary append 'field=key&field=summary' to the URL of your request.
-->
<rss version="0.92" >
<channel>
    <title>MongoDB Jira</title>
    <link>https://jira.mongodb.org</link>
    <description>This file is an XML representation of an issue</description>
    <language>en-us</language>    <build-info>
        <version>9.7.1</version>
        <build-number>970001</build-number>
        <build-date>13-04-2023</build-date>
    </build-info>


<item>
            <title>[SERVER-36263] Bypassing operation validation in applyOps should require special privilege</title>
                <link>https://jira.mongodb.org/browse/SERVER-36263</link>
                <project id="10000" key="SERVER">Core Server</project>
                    <description>&lt;p&gt;&lt;b&gt;CVE-2021-20330&lt;/b&gt;&lt;br/&gt;
 &lt;b&gt;Title&lt;/b&gt;&lt;br/&gt;
 Specific replication command with malformed oplog entries can crash secondaries&lt;/p&gt;

&lt;p&gt;&lt;b&gt;CVE ID&lt;/b&gt;&lt;br/&gt;
 CVE-2021-20330&lt;/p&gt;

&lt;p&gt;&lt;b&gt;Description&lt;/b&gt;&lt;/p&gt;

&lt;p&gt;An attacker with basic CRUD permissions on a replicated collection can run the applyOps command with specially malformed oplog entries, resulting in a potential denial of service on secondaries.&lt;/p&gt;

&lt;p&gt;This issue affects MongoDB Server v4.0 versions prior to 4.0.27; MongoDB Server v4.2 versions prior to 4.2.16; MongoDB Server v4.4 versions prior to 4.4.9.&lt;/p&gt;

&lt;p&gt;&lt;b&gt;CVSS score&lt;/b&gt;&lt;br/&gt;
 This issue&apos;s CVSS:3.1 severity is scored at 6.5 using the following scoring metrics:&lt;br/&gt;
 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H&lt;/p&gt;

&lt;p&gt;&lt;b&gt;Affected versions&lt;/b&gt;&lt;/p&gt;

&lt;p&gt;MongoDB Server v4.0 versions prior to 4.0.27;&lt;/p&gt;

&lt;p&gt;MongoDB Server v4.2 versions prior to 4.2.16;&lt;/p&gt;

&lt;p&gt;MongoDB Server v4.4 versions prior to 4.4.9.&lt;/p&gt;

&lt;p&gt;&lt;b&gt;CWE&lt;/b&gt;&lt;br/&gt;
CWE-20 Improper Input Validation&lt;/p&gt;

&lt;p&gt;&lt;b&gt;Underlying operating systems affected&lt;/b&gt;&lt;br/&gt;
 ALL&lt;/p&gt;

&lt;p&gt;&#160;&lt;/p&gt;

&lt;p&gt;As of&#160;&lt;a href=&quot;https://jira.mongodb.org/browse/SERVER-25994&quot; title=&quot;Allow applyOps to validate authorization permissions at the operation level &quot; class=&quot;issue-link&quot; data-issue-key=&quot;SERVER-25994&quot;&gt;&lt;del&gt;SERVER-25994&lt;/del&gt;&lt;/a&gt;, a user can run &lt;tt&gt;applyOps&lt;/tt&gt; if they have the privileges to perform each individual operation specified in the the &lt;tt&gt;applyOps&lt;/tt&gt; command. However, &lt;tt&gt;applyOps&lt;/tt&gt; is more powerful than other commands in that it avoids certain input validation (see&#160;&lt;a href=&quot;https://jira.mongodb.org/browse/SERVER-27096&quot; title=&quot;applyOps should validate its ops to ensure idempotency&quot; class=&quot;issue-link&quot; data-issue-key=&quot;SERVER-27096&quot;&gt;SERVER-27096&lt;/a&gt;,&#160;&lt;a href=&quot;https://jira.mongodb.org/browse/SERVER-32941&quot; title=&quot;applyOps command inserts documents without ever calling fixDocumentForInsert()&quot; class=&quot;issue-link&quot; data-issue-key=&quot;SERVER-32941&quot;&gt;SERVER-32941&lt;/a&gt;,&#160;&lt;a href=&quot;https://jira.mongodb.org/browse/SERVER-32952&quot; title=&quot;applyOps does not validate updates&quot; class=&quot;issue-link&quot; data-issue-key=&quot;SERVER-32952&quot;&gt;SERVER-32952&lt;/a&gt;, and&#160;&lt;a href=&quot;https://jira.mongodb.org/browse/SERVER-32305&quot; title=&quot;Able to create document with array as _id using applyOps&quot; class=&quot;issue-link&quot; data-issue-key=&quot;SERVER-32305&quot;&gt;SERVER-32305&lt;/a&gt;). This is done intentionally, since &lt;tt&gt;applyOps&lt;/tt&gt; is supposed to behave similarly to oplog application, where the primary does all validation and the secondary applies the changes exactly as the primary specified without validation. This feature is important to products that mimic oplog application, such as mongomirror and mongorestore. However, users should not be able to bypass validation simply because they have permission to write to a collection. Instead, &lt;tt&gt;applyOps&lt;/tt&gt; should require a special privilege for bypassing validation.&lt;/p&gt;

&lt;p&gt;We will create a new privilege bypassing system-level invariants in &lt;tt&gt;applyOps&lt;/tt&gt;. Today, this privilege will be required in order to run &lt;tt&gt;applyOps&lt;/tt&gt; at all, since we have not implemented a version of &lt;tt&gt;applyOps&lt;/tt&gt; that performs validation. The privilege will be included in &lt;tt&gt;dbAdminAnyDatabase&lt;/tt&gt;, which is included in the custom role &lt;tt&gt;atlasAdmin&lt;/tt&gt; and&#160;the temporary user that we create for Live Imports (mongomirror).&lt;/p&gt;</description>
                <environment></environment>
        <key id="575778">SERVER-36263</key>
            <summary>Bypassing operation validation in applyOps should require special privilege</summary>
                <type id="4" iconUrl="https://jira.mongodb.org/secure/viewavatar?size=xsmall&amp;avatarId=14710&amp;avatarType=issuetype">Improvement</type>
                                            <priority id="3" iconUrl="https://jira.mongodb.org/images/icons/priorities/major.svg">Major - P3</priority>
                        <status id="6" iconUrl="https://jira.mongodb.org/images/icons/statuses/closed.png" description="The issue is considered finished, the resolution is correct. Issues which are closed can be reopened.">Closed</status>
                    <statusCategory id="3" key="done" colorName="success"/>
                                    <resolution id="13201">Fixed</resolution>
                                        <assignee username="m.maher@mongodb.com">Moustafa Maher</assignee>
                                    <reporter username="tess.avitabile@mongodb.com">Tess Avitabile</reporter>
                        <labels>
                            <label>former-quick-wins</label>
                            <label>nyc</label>
                    </labels>
                <created>Tue, 24 Jul 2018 21:36:07 +0000</created>
                <updated>Sun, 29 Oct 2023 22:29:36 +0000</updated>
                            <resolved>Wed, 10 Mar 2021 16:08:37 +0000</resolved>
                                                    <fixVersion>4.9.0</fixVersion>
                    <fixVersion>4.2.16</fixVersion>
                    <fixVersion>4.0.27</fixVersion>
                    <fixVersion>4.4.9</fixVersion>
                                    <component>Replication</component>
                    <component>Security</component>
                                        <votes>0</votes>
                                    <watches>17</watches>
                                                                                                                <comments>
                            <comment id="4312015" author="judah.schvimer" created="Tue, 25 Jan 2022 14:14:23 +0000"  >&lt;p&gt;Hi &lt;a href=&quot;https://jira.mongodb.org/secure/ViewProfile.jspa?name=xwzhang%40cn.ibm.com&quot; class=&quot;user-hover&quot; rel=&quot;xwzhang@cn.ibm.com&quot;&gt;xwzhang@cn.ibm.com&lt;/a&gt;,&lt;/p&gt;

&lt;p&gt;Thank you for pointing this out! This was indeed a mistake. The fix versions were correct and I have fixed the description to match it. 4.4.6 does not have the fix for the issue, they would have to upgrade to 4.4.9 as you point out.&lt;/p&gt;

&lt;p&gt;Thank you and let me know if you have any further questions,&lt;br/&gt;
Judah&lt;/p&gt;</comment>
                            <comment id="4311194" author="JIRAUSER1269672" created="Tue, 25 Jan 2022 01:56:24 +0000"  >&lt;p&gt;Hi MongoDB team,&lt;/p&gt;

&lt;p&gt;I see some in-consistent info on this pager, could you help clarify?&lt;/p&gt;
&lt;ul&gt;
	&lt;li&gt;&lt;p&gt;&lt;b&gt;Fix Version/s:&lt;/b&gt;   &lt;a href=&quot;https://jira.mongodb.org/issues/?jql=project+%3D+SERVER+AND+fixVersion+%3D+4.9.0&quot; class=&quot;external-link&quot; rel=&quot;nofollow&quot;&gt;4.9.0&lt;/a&gt;, &lt;a href=&quot;https://jira.mongodb.org/issues/?jql=project+%3D+SERVER+AND+fixVersion+%3D+4.2.16&quot; class=&quot;external-link&quot; rel=&quot;nofollow&quot;&gt;4.2.16&lt;/a&gt;, &lt;a href=&quot;https://jira.mongodb.org/issues/?jql=project+%3D+SERVER+AND+fixVersion+%3D+4.0.27&quot; class=&quot;external-link&quot; rel=&quot;nofollow&quot;&gt;4.0.27&lt;/a&gt;, &lt;a href=&quot;https://jira.mongodb.org/issues/?jql=project+%3D+SERVER+AND+fixVersion+%3D+4.4.9&quot; class=&quot;external-link&quot; rel=&quot;nofollow&quot;&gt;4.4.9&lt;/a&gt;  &lt;/p&gt;&lt;/li&gt;
&lt;/ul&gt;


&lt;p&gt;The &lt;b&gt;Fix Version&lt;/b&gt; is 4.4.9. But &lt;b&gt;Affected versions&lt;/b&gt; is &apos;v4.4 versions prior to 4.4.6&apos;.&lt;/p&gt;

&lt;p&gt;When tracking the commits between 4.4.6 and 4.4.9, It seems 4.4.6 does not have the corresponding commit 7e053b....?&lt;/p&gt;

&lt;p&gt;&lt;a href=&quot;https://github.com/mongodb/mongo/compare/r4.4.6...r4.4.9&quot; class=&quot;external-link&quot; target=&quot;_blank&quot; rel=&quot;nofollow noopener&quot;&gt;https://github.com/mongodb/mongo/compare/r4.4.6...r4.4.9&lt;/a&gt;&lt;/p&gt;

&lt;p&gt;Our customer is using 4.4.6 enterprise edition, does it have the fix for this issue?&lt;/p&gt;</comment>
                            <comment id="3981940" author="xgen-internal-githook" created="Wed, 4 Aug 2021 23:26:51 +0000"  >&lt;p&gt;Author:&lt;/p&gt;
{&apos;name&apos;: &apos;Moustafa Maher&apos;, &apos;email&apos;: &apos;m.maher@10gen.com&apos;, &apos;username&apos;: &apos;moustafamaher&apos;}
&lt;p&gt;Message: &lt;a href=&quot;https://jira.mongodb.org/browse/SERVER-36263&quot; title=&quot;Bypassing operation validation in applyOps should require special privilege&quot; class=&quot;issue-link&quot; data-issue-key=&quot;SERVER-36263&quot;&gt;&lt;del&gt;SERVER-36263&lt;/del&gt;&lt;/a&gt; Bypassing operation validation in applyOps should require special privilege&lt;br/&gt;
Branch: v4.2&lt;br/&gt;
&lt;a href=&quot;https://github.com/mongodb/mongo/commit/865eccaf35aca29d1b71764d50227cdf853752d0&quot; class=&quot;external-link&quot; target=&quot;_blank&quot; rel=&quot;nofollow noopener&quot;&gt;https://github.com/mongodb/mongo/commit/865eccaf35aca29d1b71764d50227cdf853752d0&lt;/a&gt;&lt;/p&gt;</comment>
                            <comment id="3981918" author="xgen-internal-githook" created="Wed, 4 Aug 2021 23:14:02 +0000"  >&lt;p&gt;Author:&lt;/p&gt;
{&apos;name&apos;: &apos;Moustafa Maher&apos;, &apos;email&apos;: &apos;m.maher@10gen.com&apos;, &apos;username&apos;: &apos;moustafamaher&apos;}
&lt;p&gt;Message: &lt;a href=&quot;https://jira.mongodb.org/browse/SERVER-36263&quot; title=&quot;Bypassing operation validation in applyOps should require special privilege&quot; class=&quot;issue-link&quot; data-issue-key=&quot;SERVER-36263&quot;&gt;&lt;del&gt;SERVER-36263&lt;/del&gt;&lt;/a&gt; Bypassing operation validation in applyOps should require special privilege&lt;br/&gt;
Branch: v4.0&lt;br/&gt;
&lt;a href=&quot;https://github.com/mongodb/mongo/commit/cbec187266a9f902b3906ae8ccef2bbda0c5b27b&quot; class=&quot;external-link&quot; target=&quot;_blank&quot; rel=&quot;nofollow noopener&quot;&gt;https://github.com/mongodb/mongo/commit/cbec187266a9f902b3906ae8ccef2bbda0c5b27b&lt;/a&gt;&lt;/p&gt;</comment>
                            <comment id="3981402" author="xgen-internal-githook" created="Wed, 4 Aug 2021 19:35:03 +0000"  >&lt;p&gt;Author:&lt;/p&gt;
{&apos;name&apos;: &apos;Moustafa Maher&apos;, &apos;email&apos;: &apos;m.maher@10gen.com&apos;, &apos;username&apos;: &apos;moustafamaher&apos;}
&lt;p&gt;Message: &lt;a href=&quot;https://jira.mongodb.org/browse/SERVER-36263&quot; title=&quot;Bypassing operation validation in applyOps should require special privilege&quot; class=&quot;issue-link&quot; data-issue-key=&quot;SERVER-36263&quot;&gt;&lt;del&gt;SERVER-36263&lt;/del&gt;&lt;/a&gt; Bypassing operation validation in applyOps should require special privilege&lt;br/&gt;
Branch: v4.4&lt;br/&gt;
&lt;a href=&quot;https://github.com/mongodb/mongo/commit/7e053b675b100a31092e5a195e4549712c0966ce&quot; class=&quot;external-link&quot; target=&quot;_blank&quot; rel=&quot;nofollow noopener&quot;&gt;https://github.com/mongodb/mongo/commit/7e053b675b100a31092e5a195e4549712c0966ce&lt;/a&gt;&lt;/p&gt;</comment>
                            <comment id="3655933" author="xgen-internal-githook" created="Tue, 9 Mar 2021 23:21:58 +0000"  >&lt;p&gt;Author:&lt;/p&gt;
{&apos;name&apos;: &apos;Moustafa Maher&apos;, &apos;email&apos;: &apos;m.maher@10gen.com&apos;, &apos;username&apos;: &apos;moustafamaher&apos;}
&lt;p&gt;Message: &lt;a href=&quot;https://jira.mongodb.org/browse/SERVER-36263&quot; title=&quot;Bypassing operation validation in applyOps should require special privilege&quot; class=&quot;issue-link&quot; data-issue-key=&quot;SERVER-36263&quot;&gt;&lt;del&gt;SERVER-36263&lt;/del&gt;&lt;/a&gt; Bypassing operation validation in applyOps should require special privilege&lt;br/&gt;
Branch: master&lt;br/&gt;
&lt;a href=&quot;https://github.com/mongodb/mongo/commit/f4a56b57cb8e8fe267dfed4966b52c16dd5b489f&quot; class=&quot;external-link&quot; target=&quot;_blank&quot; rel=&quot;nofollow noopener&quot;&gt;https://github.com/mongodb/mongo/commit/f4a56b57cb8e8fe267dfed4966b52c16dd5b489f&lt;/a&gt;&lt;/p&gt;</comment>
                            <comment id="3655837" author="spencer.jackson@10gen.com" created="Tue, 9 Mar 2021 22:36:48 +0000"  >&lt;p&gt;Thanks &lt;a href=&quot;https://jira.mongodb.org/secure/ViewProfile.jspa?name=tim.fogarty&quot; class=&quot;user-hover&quot; rel=&quot;tim.fogarty&quot;&gt;tim.fogarty&lt;/a&gt;! To answer your question, yes, users will need both the new privilege we&apos;re creating and the privileges needed to perform the underlying operation.&lt;/p&gt;</comment>
                            <comment id="3653982" author="tim.fogarty" created="Tue, 9 Mar 2021 10:56:39 +0000"  >&lt;p&gt;Hey &lt;a href=&quot;https://jira.mongodb.org/secure/ViewProfile.jspa?name=spencer.jackson&quot; class=&quot;user-hover&quot; rel=&quot;spencer.jackson&quot;&gt;spencer.jackson&lt;/a&gt;, yes, that should be totally fine. We tell users to create a custom role with anyAction on anyResource when using &amp;#45;&amp;#45;oplogReplay. Just wanted to check, with the new privilege, users will still need the privileges necessary to run the underlying op too?&lt;/p&gt;</comment>
                            <comment id="1978693" author="ian@10gen.com" created="Fri, 17 Aug 2018 14:11:58 +0000"  >&lt;p&gt;Assigning to repl since this is applyOps as per Spencer&apos;s last comment.&lt;/p&gt;</comment>
                            <comment id="1956168" author="tess.avitabile" created="Wed, 25 Jul 2018 13:54:51 +0000"  >&lt;p&gt;Yes, I think applyOps as it is today should require a special privilege to run. Alternatively, we could implement validation for all those tickets and have an option to applyOps to bypass validation and make that option require a special privilege.&lt;/p&gt;</comment>
                            <comment id="1956121" author="milkie" created="Wed, 25 Jul 2018 13:14:30 +0000"  >&lt;p&gt;If we add this special privilege before we actually implement validation in applyOps for those server tickets mentioned in the description, wouldn&apos;t that effectively make applyOps require that privilege to use it at all?&lt;/p&gt;</comment>
                    </comments>
                <issuelinks>
                            <issuelinktype id="10420">
                    <name>Backports</name>
                                            <outwardlinks description="backported by">
                                                        </outwardlinks>
                                                        </issuelinktype>
                            <issuelinktype id="10011">
                    <name>Depends</name>
                                                                <inwardlinks description="is depended on by">
                                                        </inwardlinks>
                                    </issuelinktype>
                            <issuelinktype id="10320">
                    <name>Documented</name>
                                                                <inwardlinks description="is documented by">
                                        <issuelink>
            <issuekey id="1645839">DOCS-14282</issuekey>
        </issuelink>
                            </inwardlinks>
                                    </issuelinktype>
                            <issuelinktype id="10012">
                    <name>Related</name>
                                            <outwardlinks description="related to">
                                        <issuelink>
            <issuekey id="1446365">SERVER-50381</issuekey>
        </issuelink>
            <issuelink>
            <issuekey id="1584771">SERVER-53674</issuekey>
        </issuelink>
            <issuelink>
            <issuekey id="1807717">SERVER-58247</issuekey>
        </issuelink>
            <issuelink>
            <issuekey id="2052554">SERVER-66651</issuekey>
        </issuelink>
                            </outwardlinks>
                                                                <inwardlinks description="is related to">
                                        <issuelink>
            <issuekey id="488759">SERVER-32952</issuekey>
        </issuelink>
            <issuelink>
            <issuekey id="497859">SERVER-33326</issuekey>
        </issuelink>
            <issuelink>
            <issuekey id="314601">SERVER-25994</issuekey>
        </issuelink>
                            </inwardlinks>
                                    </issuelinktype>
                    </issuelinks>
                <attachments>
                    </attachments>
                <subtasks>
                    </subtasks>
                <customfields>
                                                <customfield id="customfield_10050" key="com.atlassian.jira.toolkit:comments">
                        <customfieldname># Replies</customfieldname>
                        <customfieldvalues>
                            <customfieldvalue>11.0</customfieldvalue>
                        </customfieldvalues>
                    </customfield>
                                                                <customfield id="customfield_18555" key="com.onresolve.jira.groovy.groovyrunner:scripted-field">
                        <customfieldname># of Sprints</customfieldname>
                        <customfieldvalues>
                            <customfieldvalue>2.0</customfieldvalue>

                        </customfieldvalues>
                    </customfield>
                                                                                                                                                                                                                                                                                                                                                                                                                <customfield id="customfield_12450" key="com.atlassian.jira.plugin.system.customfieldtypes:multicheckboxes">
                        <customfieldname>Backport Requested</customfieldname>
                        <customfieldvalues>
                                <customfieldvalue key="18953"><![CDATA[v4.4]]></customfieldvalue>
    <customfieldvalue key="16775"><![CDATA[v4.2]]></customfieldvalue>
    <customfieldvalue key="15640"><![CDATA[v4.0]]></customfieldvalue>
    
                        </customfieldvalues>
                    </customfield>
                                                                <customfield id="customfield_10011" key="com.atlassian.jira.plugin.system.customfieldtypes:radiobuttons">
                        <customfieldname>Backwards Compatibility</customfieldname>
                        <customfieldvalues>
                                <customfieldvalue key="10012"><![CDATA[Major Change]]></customfieldvalue>

                        </customfieldvalues>
                    </customfield>
                                                                                                                                                                                                                                                                                                                                                                                                                                            <customfield id="customfield_10055" key="com.atlassian.jira.ext.charting:firstresponsedate">
                        <customfieldname>Date of 1st Reply</customfieldname>
                        <customfieldvalues>
                            <customfieldvalue>Wed, 25 Jul 2018 13:14:30 +0000</customfieldvalue>

                        </customfieldvalues>
                    </customfield>
                                                                <customfield id="customfield_10052" key="com.atlassian.jira.toolkit:dayslastcommented">
                        <customfieldname>Days since reply</customfieldname>
                        <customfieldvalues>
                                        2 years, 2 weeks, 1 day ago
    
                        </customfieldvalues>
                    </customfield>
                                                                <customfield id="customfield_18254" key="com.onresolve.jira.groovy.groovyrunner:scripted-field">
                        <customfieldname>Dependencies</customfieldname>
                        <customfieldvalues>
                            <customfieldvalue><![CDATA[]]></customfieldvalue>


                        </customfieldvalues>
                    </customfield>
                                                                <customfield id="customfield_15850" key="com.atlassian.jira.plugins.jira-development-integration-plugin:devsummary">
                        <customfieldname>Development</customfieldname>
                        <customfieldvalues>
                            
                        </customfieldvalues>
                    </customfield>
                                                                                            <customfield id="customfield_17052" key="com.atlassian.jira.plugin.system.customfieldtypes:textarea">
                        <customfieldname>Downstream Changes Summary</customfieldname>
                        <customfieldvalues>
                            <customfieldvalue>We are adding a new privilege that must be acquired to be able to perform&lt;br/&gt;
&amp;quot;applyOps&amp;quot; command.&lt;br/&gt;
ActionType-&amp;gt; applyOps&lt;br/&gt;
Resource-&amp;gt; cluster&lt;br/&gt;
</customfieldvalue>

                        </customfieldvalues>
                    </customfield>
                                                                <customfield id="customfield_17050" key="com.atlassian.jira.plugin.system.customfieldtypes:radiobuttons">
                        <customfieldname>Downstream Team Attention</customfieldname>
                        <customfieldvalues>
                                <customfieldvalue key="16942"><![CDATA[Needed]]></customfieldvalue>

                        </customfieldvalues>
                    </customfield>
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                    <customfield id="customfield_10057" key="com.atlassian.jira.toolkit:lastusercommented">
                        <customfieldname>Last comment by Customer</customfieldname>
                        <customfieldvalues>
                            <customfieldvalue>true</customfieldvalue>
                        </customfieldvalues>
                    </customfield>
                                                                                            <customfield id="customfield_10056" key="com.atlassian.jira.toolkit:lastupdaterorcommenter">
                        <customfieldname>Last commenter</customfieldname>
                        <customfieldvalues>
                            <customfieldvalue>luke.bonanomi@mongodb.com</customfieldvalue>

                        </customfieldvalues>
                    </customfield>
                                                                <customfield id="customfield_11151" key="com.atlassian.jira.toolkit:LastCommentDate">
                        <customfieldname>Last public comment date</customfieldname>
                        <customfieldvalues>
                            2 years, 2 weeks, 1 day ago
                        </customfieldvalues>
                    </customfield>
                                                                                                                                                                                                                                                                    <customfield id="customfield_10051" key="com.atlassian.jira.toolkit:participants">
                        <customfieldname>Participants</customfieldname>
                        <customfieldvalues>
                                        <customfieldvalue>milkie@mongodb.com</customfieldvalue>
            <customfieldvalue>xgen-internal-githook</customfieldvalue>
            <customfieldvalue>ian@mongodb.com</customfieldvalue>
            <customfieldvalue>judah.schvimer@mongodb.com</customfieldvalue>
            <customfieldvalue>m.maher@mongodb.com</customfieldvalue>
            <customfieldvalue>spencer.jackson@mongodb.com</customfieldvalue>
            <customfieldvalue>tess.avitabile@mongodb.com</customfieldvalue>
            <customfieldvalue>tim.fogarty@mongodb.com</customfieldvalue>
            <customfieldvalue>xwzhang@cn.ibm.com</customfieldvalue>
    
                        </customfieldvalues>
                    </customfield>
                                                                                                                                                                                                                                        <customfield id="customfield_14254" key="com.pyxis.greenhopper.jira:gh-lexo-rank">
                        <customfieldname>Product Rank</customfieldname>
                        <customfieldvalues>
                            <customfieldvalue>1|hu3cvb:</customfieldvalue>

                        </customfieldvalues>
                    </customfield>
                                                                                                                                                                                <customfield id="customfield_12550" key="com.pyxis.greenhopper.jira:gh-lexo-rank">
                        <customfieldname>Rank</customfieldname>
                        <customfieldvalues>
                            <customfieldvalue>2|hr8iif:</customfieldvalue>

                        </customfieldvalues>
                    </customfield>
                                                                <customfield id="customfield_10558" key="com.pyxis.greenhopper.jira:gh-global-rank">
                        <customfieldname>Rank (Obsolete)</customfieldname>
                        <customfieldvalues>
                            <customfieldvalue>9223372036854775807</customfieldvalue>
                        </customfieldvalues>
                    </customfield>
                                                                                            <customfield id="customfield_23361" key="com.onresolve.jira.groovy.groovyrunner:scripted-field">
                        <customfieldname>Requested By</customfieldname>
                        <customfieldvalues>
                                

                        </customfieldvalues>
                    </customfield>
                                                                                                                                                                                                                                        <customfield id="customfield_10557" key="com.pyxis.greenhopper.jira:gh-sprint">
                        <customfieldname>Sprint</customfieldname>
                        <customfieldvalues>
                                <customfieldvalue id="4756">Repl 2021-03-08</customfieldvalue>
    <customfieldvalue id="4762">Repl 2021-03-22</customfieldvalue>

                        </customfieldvalues>
                    </customfield>
                                                                                                                                                                                                                                                                    <customfield id="customfield_17051" key="com.atlassian.jira.plugin.system.customfieldtypes:multicheckboxes">
                        <customfieldname>Teams Impacted</customfieldname>
                        <customfieldvalues>
                                <customfieldvalue key="16943"><![CDATA[Cloud]]></customfieldvalue>
    <customfieldvalue key="16944"><![CDATA[Docs]]></customfieldvalue>
    <customfieldvalue key="20960"><![CDATA[DBX: DevTools (Compass, Shell, VS Code Ext)]]></customfieldvalue>
    
                        </customfieldvalues>
                    </customfield>
                                                                                            <customfield id="customfield_10053" key="com.atlassian.jira.ext.charting:timeinstatus">
                        <customfieldname>Time In Status</customfieldname>
                        <customfieldvalues>
                            
                        </customfieldvalues>
                    </customfield>
                                                                                                                                                                                                                                                                                                                                                                                                                                                                        <customfield id="customfield_22870" key="com.onresolve.jira.groovy.groovyrunner:scripted-field">
                        <customfieldname>Triagers</customfieldname>
                        <customfieldvalues>
                                

                        </customfieldvalues>
                    </customfield>
                                                                                                                                                                                                                                                                                                                                                                                    <customfield id="customfield_14350" key="com.pyxis.greenhopper.jira:gh-lexo-rank">
                        <customfieldname>serverRank</customfieldname>
                        <customfieldvalues>
                            <customfieldvalue>1|hu2z4n:</customfieldvalue>

                        </customfieldvalues>
                    </customfield>
                                    </customfields>
    </item>
</channel>
</rss>