Lucene search

K
osvGoogleOSV:GHSA-7J9M-J397-G4WX
HistoryFeb 21, 2023 - 9:30 p.m.

MongoDB .NET/C# Driver vulnerable to Deserialization of Untrusted Data

2023-02-2121:30:18
Google
osv.dev
15

0.001 Low

EPSS

Percentile

41.3%

Under very specific circumstances, a privileged user is able to cause arbitrary code to be executed which may cause further disruption to services. This is specific to applications written in C#. This affects all MongoDB .NET/C# Driver versions prior to and including v2.18.0

0.001 Low

EPSS

Percentile

41.3%

Related for OSV:GHSA-7J9M-J397-G4WX