CVE-2025-1756
7.8
Vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Exploitability: 1.8 / Impact: 5.9
Source: NVD
Description
mongosh may be susceptible to local privilege escalation under certain conditions potentially enabling unauthorized actions on a user's system with elevated privilege, when a crafted file is stored in C:\node_modules\. This issue affects mongosh prior to 2.3.0
Affected (13)
Products: Mongodb: Mongosh · Redhat: Codeready Linux Builder Eus, Codeready Linux Builder For Arm64 Eus, Codeready Linux Builder For Ibm Z Systems Eus, Codeready Linux Builder For Power Little Endian Eus, Enterprise Linux Eus, Enterprise Linux For Arm 64, Enterprise Linux For Arm 64 Eus, Enterprise Linux For Ibm Z Systems, Enterprise Linux For Ibm Z Systems Eus, Enterprise Linux For Power Little Endian Eus, Enterprise Linux Server Aus, Enterprise Linux Update Services For Sap Solutions
Configuration B
| Vulnerable Software | Affected Versions |
|---|---|
| Version 9.4 | |
| Version 9.4_aarch64 | |
| Version 9.4_s390x | |
| Version 9.4_ppc64le | |
| Version 9.4 | |
| Version 9.4_aarch64 | |
| Version 9.4_aarch64 | |
| Version 9.4_s390x | |
| Version 9.4_s390x | |
| Version 9.4_ppc64le | |
| Version 9.4 | |
| Version 9.4 |
References (2)
Source: 134c704f-9b21-4f2e-91b3-4a467353bcc0
Third Party Advisory
Timeline
No history available yet.