7.8
CVE-2025-1756
- EPSS 0.03%
- Veröffentlicht 27.02.2025 16:15:39
- Zuletzt bearbeitet 09.04.2025 14:07:26
- Quelle cna@mongodb.com
- CVE-Watchlists
- Unerledigt
Loginmongosh may be susceptible to local privilege escalation under certain conditions potentially enabling unauthorized actions on a user's system with elevated privilege, when a crafted file is stored in C:\node_modules\. This issue affects mongosh prior to 2.3.0
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Redhat ≫ Codeready Linux Builder Eus Version9.4
Redhat ≫ Codeready Linux Builder For Arm64 Eus Version9.4_aarch64
Redhat ≫ Codeready Linux Builder For Ibm Z Systems Eus Version9.4_s390x
Redhat ≫ Codeready Linux Builder For Power Little Endian Eus Version9.4_ppc64le
Redhat ≫ Enterprise Linux Update Services For Sap Solutions Version9.4
Redhat ≫ Enterprise Linux Eus Version9.4
Redhat ≫ Enterprise Linux For Arm 64 Version9.4_aarch64
Redhat ≫ Enterprise Linux For Arm 64 Eus Version9.4_aarch64
Redhat ≫ Enterprise Linux For Ibm Z Systems Version9.4_s390x
Redhat ≫ Enterprise Linux For Ibm Z Systems Eus Version9.4_s390x
Redhat ≫ Enterprise Linux For Power Little Endian Eus Version9.4_ppc64le
Redhat ≫ Enterprise Linux Server Aus Version9.4
| Typ | Quelle | Score | Percentile |
|---|---|---|---|
| EPSS | FIRST.org | 0.03% | 0.06 |
| Quelle | Base Score | Exploit Score | Impact Score | Vector String |
|---|---|---|---|---|
| nvd@nist.gov | 7.8 | 1.8 | 5.9 |
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
|
| cna@mongodb.com | 7.5 | 0.8 | 6 |
CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:C/C:H/I:H/A:H
|
CWE-426 Untrusted Search Path
The product searches for critical resources using an externally-supplied search path that can point to resources that are not under the product's direct control.