CVE-2024-7553
CVSS3
Attack Vector
LOCAL
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
EPSS
Percentile
5.1%
Incorrect validation of files loaded from a local untrusted directory may allow local privilege escalation if the underlying operating systems is Windows. This may result in the application executing arbitrary behaviour determined by the contents of untrusted files. This issue affects MongoDB Server v5.0 versions prior to 5.0.27, MongoDB Server v6.0 versions prior to 6.0.16, MongoDB Server v7.0 versions prior to 7.0.12, MongoDB Server v7.3 versions prior 7.3.3, MongoDB C Driver versions prior to 1.26.2 and MongoDB PHP Driver versions prior to 1.18.1.
Required Configuration:
Only environments with Windows as the underlying operating system is affected by this issue
Affected configurations
| Vendor | Product | Version | CPE |
|---|---|---|---|
| mongodb | mongodb | * | cpe:2.3:a:mongodb:mongodb:*:*:*:*:*:*:*:* |
| microsoft | windows_10_1507 | - | cpe:2.3:o:microsoft:windows_10_1507:-:*:*:*:*:*:x64:* |
| microsoft | windows_10_1511 | - | cpe:2.3:o:microsoft:windows_10_1511:-:*:*:*:*:*:x64:* |
| microsoft | windows_10_1607 | - | cpe:2.3:o:microsoft:windows_10_1607:-:*:*:*:*:*:x64:* |
| microsoft | windows_10_1703 | - | cpe:2.3:o:microsoft:windows_10_1703:-:*:*:*:*:*:x64:* |
| microsoft | windows_10_1709 | - | cpe:2.3:o:microsoft:windows_10_1709:-:*:*:*:*:*:x64:* |
| microsoft | windows_10_1803 | - | cpe:2.3:o:microsoft:windows_10_1803:-:*:*:*:*:*:x64:* |
| microsoft | windows_10_1809 | - | cpe:2.3:o:microsoft:windows_10_1809:-:*:*:*:*:*:x64:* |
| microsoft | windows_10_1903 | - | cpe:2.3:o:microsoft:windows_10_1903:-:*:*:*:*:*:x64:* |
| microsoft | windows_10_1909 | - | cpe:2.3:o:microsoft:windows_10_1909:-:*:*:*:*:*:x64:* |
Related
CVSS3
Attack Vector
LOCAL
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
EPSS
Percentile
5.1%