7.8

CVE-2024-7553

Incorrect validation of files loaded from a local untrusted directory may allow local privilege escalation if the underlying operating systems is Windows. This may result in the application executing arbitrary behaviour determined by the contents of untrusted files. This issue affects MongoDB Server v5.0 versions prior to 5.0.27, MongoDB Server v6.0 versions prior to 6.0.16, MongoDB Server v7.0 versions prior to 7.0.12, MongoDB Server v7.3 versions prior 7.3.3, MongoDB C Driver versions prior to 1.26.2 and MongoDB PHP Driver versions prior to 1.18.1.

Required Configuration:

Only environments with Windows as the underlying operating system is affected by this issue

Data is provided by the National Vulnerability Database (NVD)
Mongodb ≫ Mongodb Version >= 5.0.0 < 5.0.27
   Microsoft ≫ Windows 10 1507 Version- HwPlatformx64
   Microsoft ≫ Windows 10 1511 Version- HwPlatformx64
   Microsoft ≫ Windows 10 1607 Version- HwPlatformx64
   Microsoft ≫ Windows 10 1703 Version- HwPlatformx64
   Microsoft ≫ Windows 10 1709 Version- HwPlatformx64
   Microsoft ≫ Windows 10 1803 Version- HwPlatformx64
   Microsoft ≫ Windows 10 1809 Version- HwPlatformx64
   Microsoft ≫ Windows 10 1903 Version- HwPlatformx64
   Microsoft ≫ Windows 10 1909 Version- HwPlatformx64
   Microsoft ≫ Windows 10 2004 Version- HwPlatformx64
   Microsoft ≫ Windows 10 20h2 Version- HwPlatformx64
   Microsoft ≫ Windows 10 21h1 Version- HwPlatformx64
   Microsoft ≫ Windows 10 21h2 Version- HwPlatformx64
   Microsoft ≫ Windows 10 22h2 Version- HwPlatformx64
   Microsoft ≫ Windows Server 2016 Version-
   Microsoft ≫ Windows Server 2019 Version-
Mongodb ≫ Mongodb Version >= 6.0.0 < 6.0.16
   Microsoft ≫ Windows 10 1507 Version- HwPlatformx64
   Microsoft ≫ Windows 10 1511 Version- HwPlatformx64
   Microsoft ≫ Windows 10 1607 Version- HwPlatformx64
   Microsoft ≫ Windows 10 1703 Version- HwPlatformx64
   Microsoft ≫ Windows 10 1709 Version- HwPlatformx64
   Microsoft ≫ Windows 10 1803 Version- HwPlatformx64
   Microsoft ≫ Windows 10 1809 Version- HwPlatformx64
   Microsoft ≫ Windows 10 1903 Version- HwPlatformx64
   Microsoft ≫ Windows 10 1909 Version- HwPlatformx64
   Microsoft ≫ Windows 10 2004 Version- HwPlatformx64
   Microsoft ≫ Windows 10 20h2 Version- HwPlatformx64
   Microsoft ≫ Windows 10 21h1 Version- HwPlatformx64
   Microsoft ≫ Windows 10 21h2 Version- HwPlatformx64
   Microsoft ≫ Windows 10 22h2 Version- HwPlatformx64
   Microsoft ≫ Windows Server 2016 Version-
   Microsoft ≫ Windows Server 2019 Version-
Mongodb ≫ Mongodb Version >= 7.0.0 < 7.0.12
   Microsoft ≫ Windows 11 Version-
   Microsoft ≫ Windows 11 21h2 Version- HwPlatformx64
   Microsoft ≫ Windows 11 22h2 Version- HwPlatformx64
   Microsoft ≫ Windows 11 23h2 Version- HwPlatformx64
   Microsoft ≫ Windows Server 2019 Version-
   Microsoft ≫ Windows Server 2022 Version-
Mongodb ≫ Mongodb Version >= 7.3.0 < 7.3.3
   Microsoft ≫ Windows 11 Version-
   Microsoft ≫ Windows 11 21h2 Version- HwPlatformx64
   Microsoft ≫ Windows 11 22h2 Version- HwPlatformx64
   Microsoft ≫ Windows 11 23h2 Version- HwPlatformx64
   Microsoft ≫ Windows Server 2019 Version-
   Microsoft ≫ Windows Server 2022 Version-
Mongodb ≫ C Driver SwPlatformmongodb Version < 1.26.2
   Microsoft ≫ Windows 10 1507 Version- HwPlatformx64
   Microsoft ≫ Windows 10 1511 Version- HwPlatformx64
   Microsoft ≫ Windows 10 1607 Version- HwPlatformx64
   Microsoft ≫ Windows 10 1703 Version- HwPlatformx64
   Microsoft ≫ Windows 10 1709 Version- HwPlatformx64
   Microsoft ≫ Windows 10 1803 Version- HwPlatformx64
   Microsoft ≫ Windows 10 1809 Version- HwPlatformx64
   Microsoft ≫ Windows 10 1903 Version- HwPlatformx64
   Microsoft ≫ Windows 10 1909 Version- HwPlatformx64
   Microsoft ≫ Windows 10 2004 Version- HwPlatformx64
   Microsoft ≫ Windows 10 20h2 Version- HwPlatformx64
   Microsoft ≫ Windows 10 21h1 Version- HwPlatformx64
   Microsoft ≫ Windows 10 21h2 Version- HwPlatformx64
   Microsoft ≫ Windows 10 22h2 Version- HwPlatformx64
   Microsoft ≫ Windows 11 Version-
   Microsoft ≫ Windows 11 21h2 Version- HwPlatformx64
   Microsoft ≫ Windows 11 22h2 Version- HwPlatformx64
   Microsoft ≫ Windows 11 23h2 Version- HwPlatformx64
   Microsoft ≫ Windows Server 2016 Version-
   Microsoft ≫ Windows Server 2019 Version-
   Microsoft ≫ Windows Server 2022 Version-
Mongodb ≫ Php Driver SwPlatformmongodb Version < 1.18.1
   Microsoft ≫ Windows 10 1507 Version- HwPlatformx64
   Microsoft ≫ Windows 10 1511 Version- HwPlatformx64
   Microsoft ≫ Windows 10 1607 Version- HwPlatformx64
   Microsoft ≫ Windows 10 1703 Version- HwPlatformx64
   Microsoft ≫ Windows 10 1709 Version- HwPlatformx64
   Microsoft ≫ Windows 10 1803 Version- HwPlatformx64
   Microsoft ≫ Windows 10 1809 Version- HwPlatformx64
   Microsoft ≫ Windows 10 1903 Version- HwPlatformx64
   Microsoft ≫ Windows 10 1909 Version- HwPlatformx64
   Microsoft ≫ Windows 10 2004 Version- HwPlatformx64
   Microsoft ≫ Windows 10 20h2 Version- HwPlatformx64
   Microsoft ≫ Windows 10 21h1 Version- HwPlatformx64
   Microsoft ≫ Windows 10 21h2 Version- HwPlatformx64
   Microsoft ≫ Windows 10 22h2 Version- HwPlatformx64
   Microsoft ≫ Windows 11 Version-
   Microsoft ≫ Windows 11 21h2 Version- HwPlatformx64
   Microsoft ≫ Windows 11 22h2 Version- HwPlatformx64
   Microsoft ≫ Windows 11 23h2 Version- HwPlatformx64
   Microsoft ≫ Windows Server 2016 Version-
   Microsoft ≫ Windows Server 2019 Version-
   Microsoft ≫ Windows Server 2022 Version-
Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.
EPSS Metriken
Type Source Score Percentile
EPSS FIRST.org 0.14% 0.349
CVSS Metriken
Source Base Score Exploit Score Impact Score Vector string
nvd@nist.gov 7.8 1.8 5.9
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
cna@mongodb.com 7.3 1.3 5.9
CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H
CWE-284 Improper Access Control

The product does not restrict or incorrectly restricts access to a resource from an unauthorized actor.