Vulnerability-Lookup

Search criteria ⓘ Use this form to refine search results.
Full-text search supports keyword queries with ranking and filtering.
You can combine vendor, product, and sources to narrow results.
Enable “Apply ordering” to sort by date instead of relevance.

Full-Text Search

Vendor

Product

Assigner

Sources

Sort by

Order

Apply ordering (override relevance)

CVE-2025-12119 (GCVE-0-2025-12119)

Vulnerability from nvd – Published: 2025-11-18 20:21 – Updated: 2026-01-14 19:04

Title

Bulk write with options may read invalid memory

Summary

A mongoc_bulk_operation_t may read invalid memory if large options are passed.

Severity

6.9 (Medium)


                        
                          CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:L/SC:N/SI:N/SA:N

6.8 (Medium)


                        
                          CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:L

SSVC

Exploitation: none Automatable: no Technical Impact: partial

CISA Coordinator (v2.0.3)

CWE

CWE-825 - Expired Pointer Dereference

Assigner

mongodb

References

4 references

URL	Tags
https://github.com/mongodb/mongo-php-driver/relea…
https://github.com/mongodb/mongo-c-driver/release…
https://github.com/mongodb/mongo-c-driver/release…
https://lists.debian.org/debian-lts-announce/2026…

Impacted products

2 products

Vendor	Product	Version
MongoDB	C Driver	Affected: 1.9.0 , ≤ 1.30.5 (semver) Affected: 2.0.0 , ≤ 2.1.1 (semver)
MongoDB	PHP Driver	Affected: 0 , ≤ 2.1.2 (semver)

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2025-12119",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2025-11-19T16:14:28.900742Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2025-11-19T16:48:51.591Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      },
      {
        "providerMetadata": {
          "dateUpdated": "2026-01-14T19:04:31.839Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "url": "https://lists.debian.org/debian-lts-announce/2026/01/msg00009.html"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "collectionURL": "https://github.com/mongodb/mongo-c-driver",
          "defaultStatus": "unaffected",
          "product": "C Driver",
          "vendor": "MongoDB",
          "versions": [
            {
              "lessThanOrEqual": "1.30.5",
              "status": "affected",
              "version": "1.9.0",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "2.1.1",
              "status": "affected",
              "version": "2.0.0",
              "versionType": "semver"
            }
          ]
        },
        {
          "collectionURL": "https://github.com/mongodb/mongo-php-driver",
          "defaultStatus": "unaffected",
          "product": "PHP Driver",
          "vendor": "MongoDB",
          "versions": [
            {
              "lessThanOrEqual": "2.1.2",
              "status": "affected",
              "version": "0",
              "versionType": "semver"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "supportingMedia": [
            {
              "base64": false,
              "type": "text/html",
              "value": "A mongoc_bulk_operation_t may read invalid memory if large options are passed."
            }
          ],
          "value": "A mongoc_bulk_operation_t may read invalid memory if large options are passed."
        }
      ],
      "metrics": [
        {
          "cvssV4_0": {
            "Automatable": "NOT_DEFINED",
            "Recovery": "NOT_DEFINED",
            "Safety": "NOT_DEFINED",
            "attackComplexity": "LOW",
            "attackRequirements": "NONE",
            "attackVector": "LOCAL",
            "baseScore": 6.9,
            "baseSeverity": "MEDIUM",
            "exploitMaturity": "NOT_DEFINED",
            "privilegesRequired": "LOW",
            "providerUrgency": "NOT_DEFINED",
            "subAvailabilityImpact": "NONE",
            "subConfidentialityImpact": "NONE",
            "subIntegrityImpact": "NONE",
            "userInteraction": "NONE",
            "valueDensity": "NOT_DEFINED",
            "vectorString": "CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:L/SC:N/SI:N/SA:N",
            "version": "4.0",
            "vulnAvailabilityImpact": "LOW",
            "vulnConfidentialityImpact": "HIGH",
            "vulnIntegrityImpact": "NONE",
            "vulnerabilityResponseEffort": "NOT_DEFINED"
          },
          "format": "CVSS",
          "scenarios": [
            {
              "lang": "en",
              "value": "GENERAL"
            }
          ]
        },
        {
          "cvssV3_1": {
            "attackComplexity": "LOW",
            "attackVector": "LOCAL",
            "availabilityImpact": "LOW",
            "baseScore": 6.8,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:L",
            "version": "3.1"
          },
          "format": "CVSS",
          "scenarios": [
            {
              "lang": "en",
              "value": "GENERAL"
            }
          ]
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-825",
              "description": "CWE-825 Expired Pointer Dereference",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2025-11-18T20:21:08.252Z",
        "orgId": "a39b4221-9bd0-4244-95fc-f3e2e07f1deb",
        "shortName": "mongodb"
      },
      "references": [
        {
          "url": "https://github.com/mongodb/mongo-php-driver/releases/tag/1.21.2"
        },
        {
          "url": "https://github.com/mongodb/mongo-c-driver/releases/tag/1.30.6"
        },
        {
          "url": "https://github.com/mongodb/mongo-c-driver/releases/tag/2.1.2"
        }
      ],
      "source": {
        "discovery": "UNKNOWN"
      },
      "title": "Bulk write with options may read invalid memory",
      "x_generator": {
        "engine": "Vulnogram 0.5.0"
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "a39b4221-9bd0-4244-95fc-f3e2e07f1deb",
    "assignerShortName": "mongodb",
    "cveId": "CVE-2025-12119",
    "datePublished": "2025-11-18T20:21:08.252Z",
    "dateReserved": "2025-10-23T16:43:24.098Z",
    "dateUpdated": "2026-01-14T19:04:31.839Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

CVE-2024-7553 (GCVE-0-2024-7553)

Vulnerability from nvd – Published: 2024-08-07 09:57 – Updated: 2024-08-07 15:27

Title

Accessing Untrusted Directory May Allow Local Privilege Escalation

Summary

Incorrect validation of files loaded from a local untrusted directory may allow local privilege escalation if the underlying operating systems is Windows. This may result in the application executing arbitrary behaviour determined by the contents of untrusted files. This issue affects MongoDB Server v5.0 versions prior to 5.0.27, MongoDB Server v6.0 versions prior to 6.0.16, MongoDB Server v7.0 versions prior to 7.0.12, MongoDB Server v7.3 versions prior 7.3.3, MongoDB C Driver versions prior to 1.26.2 and MongoDB PHP Driver versions prior to 1.18.1. Required Configuration: Only environments with Windows as the underlying operating system is affected by this issue

Severity

7.3 (High)


                        
                          CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H

SSVC

Exploitation: none Automatable: no Technical Impact: total

CISA Coordinator (v2.0.3)

CWE

CWE-284 - Improper Access Control

Assigner

mongodb

References

3 references

URL	Tags
https://jira.mongodb.org/browse/PHPC-2369
https://jira.mongodb.org/browse/SERVER-93211
https://jira.mongodb.org/browse/CDRIVER-5650

Impacted products

3 products

Vendor	Product	Version
MongoDB Inc	MongoDB Server	Affected: 5.0 , < 5.0.27 (custom) Affected: 6.0 , < 6.0.16 (custom) Affected: 7.0 , < 7.0.12 (custom) Affected: 7.3 , < 7.3.3 (custom) cpe:2.3:a:mongodb:mongodb:5.0.0:::::::* cpe:2.3:a:mongodb:mongodb:5.0.1:::::::* cpe:2.3:a:mongodb:mongodb:5.0.2:::::::* cpe:2.3:a:mongodb:mongodb:5.0.3:::::::* cpe:2.3:a:mongodb:mongodb:5.0.4:::::::* cpe:2.3:a:mongodb:mongodb:5.0.5:::::::* cpe:2.3:a:mongodb:mongodb:5.0.6:::::::* cpe:2.3:a:mongodb:mongodb:5.0.7:::::::* cpe:2.3:a:mongodb:mongodb:5.0.8:::::::* cpe:2.3:a:mongodb:mongodb:5.0.9:::::::* cpe:2.3:a:mongodb:mongodb:5.0.10:::::::* cpe:2.3:a:mongodb:mongodb:5.0.11:::::::* cpe:2.3:a:mongodb:mongodb:5.0.12:::::::* cpe:2.3:a:mongodb:mongodb:5.0.13:::::::* cpe:2.3:a:mongodb:mongodb:5.0.14:::::::* cpe:2.3:a:mongodb:mongodb:5.0.15:::::::* cpe:2.3:a:mongodb:mongodb:5.0.16:::::::* cpe:2.3:a:mongodb:mongodb:5.0.17:::::::* cpe:2.3:a:mongodb:mongodb:5.0.18:::::::* cpe:2.3:a:mongodb:mongodb:5.0.19:::::::* cpe:2.3:a:mongodb:mongodb:5.0.20:::::::* cpe:2.3:a:mongodb:mongodb:5.0.21:::::::* cpe:2.3:a:mongodb:mongodb:5.0.22:::::::* cpe:2.3:a:mongodb:mongodb:5.0.23:::::::* cpe:2.3:a:mongodb:mongodb:5.0.24:::::::* cpe:2.3:a:mongodb:mongodb:5.0.25:::::::* cpe:2.3:a:mongodb:mongodb:5.0.26:::::::* cpe:2.3:a:mongodb:mongodb:6.0.0:::::::* cpe:2.3:a:mongodb:mongodb:6.0.1:::::::* cpe:2.3:a:mongodb:mongodb:6.0.2:::::::* cpe:2.3:a:mongodb:mongodb:6.0.3:::::::* cpe:2.3:a:mongodb:mongodb:6.0.4:::::::* cpe:2.3:a:mongodb:mongodb:6.0.5:::::::* cpe:2.3:a:mongodb:mongodb:6.0.6:::::::* cpe:2.3:a:mongodb:mongodb:6.0.7:::::::* cpe:2.3:a:mongodb:mongodb:6.0.8:::::::* cpe:2.3:a:mongodb:mongodb:6.0.9:::::::* cpe:2.3:a:mongodb:mongodb:6.0.10:::::::* cpe:2.3:a:mongodb:mongodb:6.0.11:::::::* cpe:2.3:a:mongodb:mongodb:6.0.12:::::::* cpe:2.3:a:mongodb:mongodb:6.0.13:::::::* cpe:2.3:a:mongodb:mongodb:6.0.14:::::::* cpe:2.3:a:mongodb:mongodb:6.0.15:::::::* cpe:2.3:a:mongodb:mongodb:7.0.0:::::::* cpe:2.3:a:mongodb:mongodb:7.0.1:::::::* cpe:2.3:a:mongodb:mongodb:7.0.2:::::::* cpe:2.3:a:mongodb:mongodb:7.0.3:::::::* cpe:2.3:a:mongodb:mongodb:7.0.4:::::::* cpe:2.3:a:mongodb:mongodb:7.0.5:::::::* cpe:2.3:a:mongodb:mongodb:7.0.6:::::::* cpe:2.3:a:mongodb:mongodb:7.0.7:::::::* cpe:2.3:a:mongodb:mongodb:7.0.8:::::::* cpe:2.3:a:mongodb:mongodb:7.0.9:::::::* cpe:2.3:a:mongodb:mongodb:7.0.10:::::::* cpe:2.3:a:mongodb:mongodb:7.0.11:::::::* cpe:2.3:a:mongodb:mongodb:7.3.0:::::::* cpe:2.3:a:mongodb:mongodb:7.3.1:::::::* cpe:2.3:a:mongodb:mongodb:7.3.2:::::::* cpe:2.3:a:mongodb:c_driver:0.1:::::mongodb:: cpe:2.3:a:mongodb:c_driver:0.2:::::mongodb:: cpe:2.3:a:mongodb:c_driver:0.3:::::mongodb:: cpe:2.3:a:mongodb:c_driver:0.3.1:::::mongodb:: cpe:2.3:a:mongodb:c_driver:0.4:::::mongodb:: cpe:2.3:a:mongodb:c_driver:0.5:::::mongodb:: cpe:2.3:a:mongodb:c_driver:0.5.1:::::mongodb:: cpe:2.3:a:mongodb:c_driver:0.5.2:::::mongodb:: cpe:2.3:a:mongodb:c_driver:0.6:::::mongodb:: cpe:2.3:a:mongodb:c_driver:0.7:::::mongodb:: cpe:2.3:a:mongodb:c_driver:0.7.1:::::mongodb:: cpe:2.3:a:mongodb:c_driver:0.8:::::mongodb:: cpe:2.3:a:mongodb:c_driver:0.8.1:::::mongodb:: cpe:2.3:a:mongodb:c_driver:0.90.0:::::mongodb:: cpe:2.3:a:mongodb:c_driver:0.92.0:::::mongodb:: cpe:2.3:a:mongodb:c_driver:0.92.2:::::mongodb:: cpe:2.3:a:mongodb:c_driver:0.94.0:::::mongodb:: cpe:2.3:a:mongodb:c_driver:0.94.2:::::mongodb:: cpe:2.3:a:mongodb:c_driver:0.96.0:::::mongodb:: cpe:2.3:a:mongodb:c_driver:0.96.2:::::mongodb:: cpe:2.3:a:mongodb:c_driver:0.96.4:::::mongodb:: cpe:2.3:a:mongodb:c_driver:0.98.0:::::mongodb:: cpe:2.3:a:mongodb:c_driver:0.98.2:::::mongodb:: cpe:2.3:a:mongodb:c_driver:1.0.0:::::mongodb:: cpe:2.3:a:mongodb:c_driver:1.0.2:::::mongodb:: cpe:2.3:a:mongodb:c_driver:1.1.0:-::::mongodb::* cpe:2.3:a:mongodb:c_driver:1.1.0:rc0::::mongodb::* cpe:2.3:a:mongodb:c_driver:1.1.2:::::mongodb:: cpe:2.3:a:mongodb:c_driver:1.1.4:::::mongodb:: cpe:2.3:a:mongodb:c_driver:1.1.5:::::mongodb:: cpe:2.3:a:mongodb:c_driver:1.1.6:::::mongodb:: cpe:2.3:a:mongodb:c_driver:1.1.7:::::mongodb:: cpe:2.3:a:mongodb:c_driver:1.1.8:::::mongodb:: cpe:2.3:a:mongodb:c_driver:1.1.9:::::mongodb:: cpe:2.3:a:mongodb:c_driver:1.1.10:::::mongodb:: cpe:2.3:a:mongodb:c_driver:1.1.11:::::mongodb:: cpe:2.3:a:mongodb:c_driver:1.2.0:-::::mongodb::* cpe:2.3:a:mongodb:c_driver:1.2.0:beta::::mongodb::* cpe:2.3:a:mongodb:c_driver:1.2.0:beta1::::mongodb::* cpe:2.3:a:mongodb:c_driver:1.2.0:rc0::::mongodb::* cpe:2.3:a:mongodb:c_driver:1.2.1:::::mongodb:: cpe:2.3:a:mongodb:c_driver:1.2.2:::::mongodb:: cpe:2.3:a:mongodb:c_driver:1.2.3:::::mongodb:: cpe:2.3:a:mongodb:c_driver:1.2.4:::::mongodb:: cpe:2.3:a:mongodb:c_driver:1.3.0:-::::mongodb::* cpe:2.3:a:mongodb:c_driver:1.3.0:beta0::::mongodb::* cpe:2.3:a:mongodb:c_driver:1.3.0:rc0::::mongodb::* cpe:2.3:a:mongodb:c_driver:1.3.1:::::mongodb:: cpe:2.3:a:mongodb:c_driver:1.3.2:::::mongodb:: cpe:2.3:a:mongodb:c_driver:1.3.3:::::mongodb:: cpe:2.3:a:mongodb:c_driver:1.3.4:::::mongodb:: cpe:2.3:a:mongodb:c_driver:1.3.5:::::mongodb:: cpe:2.3:a:mongodb:c_driver:1.3.6:::::mongodb:: cpe:2.3:a:mongodb:c_driver:1.4.0:-::::mongodb::* cpe:2.3:a:mongodb:c_driver:1.4.0:beta0::::mongodb::* cpe:2.3:a:mongodb:c_driver:1.4.0:beta1::::mongodb::* cpe:2.3:a:mongodb:c_driver:1.4.1:::::mongodb:: cpe:2.3:a:mongodb:c_driver:1.4.2:::::mongodb:: cpe:2.3:a:mongodb:c_driver:1.4.3:::::mongodb:: cpe:2.3:a:mongodb:c_driver:1.5.0:-::::mongodb::* cpe:2.3:a:mongodb:c_driver:1.5.0:rc0::::mongodb::* cpe:2.3:a:mongodb:c_driver:1.5.0:rc1::::mongodb::* cpe:2.3:a:mongodb:c_driver:1.5.0:rc2::::mongodb::* cpe:2.3:a:mongodb:c_driver:1.5.0:rc3::::mongodb::* cpe:2.3:a:mongodb:c_driver:1.5.0:rc4::::mongodb::* cpe:2.3:a:mongodb:c_driver:1.5.0:rc6::::mongodb::* cpe:2.3:a:mongodb:c_driver:1.5.1:::::mongodb:: cpe:2.3:a:mongodb:c_driver:1.5.2:::::mongodb:: cpe:2.3:a:mongodb:c_driver:1.5.3:::::mongodb:: cpe:2.3:a:mongodb:c_driver:1.5.4:::::mongodb:: cpe:2.3:a:mongodb:c_driver:1.5.5:::::mongodb:: cpe:2.3:a:mongodb:c_driver:1.6.0:-::::mongodb::* cpe:2.3:a:mongodb:c_driver:1.6.0:rc0::::mongodb::* cpe:2.3:a:mongodb:c_driver:1.6.1:::::mongodb:: cpe:2.3:a:mongodb:c_driver:1.6.2:::::mongodb:: cpe:2.3:a:mongodb:c_driver:1.6.3:::::mongodb:: cpe:2.3:a:mongodb:c_driver:1.7.0:-::::mongodb::* cpe:2.3:a:mongodb:c_driver:1.7.0:rc0::::mongodb::* cpe:2.3:a:mongodb:c_driver:1.7.0:rc1::::mongodb::* cpe:2.3:a:mongodb:c_driver:1.7.0:rc2::::mongodb::* cpe:2.3:a:mongodb:c_driver:1.8.0:-::::mongodb::* cpe:2.3:a:mongodb:c_driver:1.8.0:rc0::::mongodb::* cpe:2.3:a:mongodb:c_driver:1.8.0:rc1::::mongodb::* cpe:2.3:a:mongodb:c_driver:1.8.1:::::mongodb:: cpe:2.3:a:mongodb:c_driver:1.8.2:::::mongodb:: cpe:2.3:a:mongodb:c_driver:1.9.0:-::::mongodb::* cpe:2.3:a:mongodb:c_driver:1.9.0:rc0::::mongodb::* cpe:2.3:a:mongodb:c_driver:1.9.0:rc1::::mongodb::* cpe:2.3:a:mongodb:c_driver:1.9.1:::::mongodb:: cpe:2.3:a:mongodb:c_driver:1.9.2:::::mongodb:: cpe:2.3:a:mongodb:c_driver:1.9.3:::::mongodb:: cpe:2.3:a:mongodb:c_driver:1.9.4:::::mongodb:: cpe:2.3:a:mongodb:c_driver:1.9.5:::::mongodb:: cpe:2.3:a:mongodb:c_driver:1.10.0:::::mongodb:: cpe:2.3:a:mongodb:c_driver:1.10.1:::::mongodb:: cpe:2.3:a:mongodb:c_driver:1.10.2:::::mongodb:: cpe:2.3:a:mongodb:c_driver:1.10.3:::::mongodb:: cpe:2.3:a:mongodb:c_driver:1.11.0:::::mongodb:: cpe:2.3:a:mongodb:c_driver:1.12.0:::::mongodb:: cpe:2.3:a:mongodb:c_driver:1.13.0:::::mongodb:: cpe:2.3:a:mongodb:c_driver:1.13.1:::::mongodb:: cpe:2.3:a:mongodb:c_driver:1.14.0:::::mongodb:: cpe:2.3:a:mongodb:c_driver:1.14.1:::::mongodb:: cpe:2.3:a:mongodb:c_driver:1.15.0:::::mongodb:: cpe:2.3:a:mongodb:c_driver:1.15.1:::::mongodb:: cpe:2.3:a:mongodb:c_driver:1.15.2:::::mongodb:: cpe:2.3:a:mongodb:c_driver:1.15.3:::::mongodb:: cpe:2.3:a:mongodb:c_driver:1.16.0:::::mongodb:: cpe:2.3:a:mongodb:c_driver:1.16.1:::::mongodb:: cpe:2.3:a:mongodb:c_driver:1.16.2:::::mongodb:: cpe:2.3:a:mongodb:c_driver:1.17.0:-::::mongodb::* cpe:2.3:a:mongodb:c_driver:1.17.0:beta::::mongodb::* cpe:2.3:a:mongodb:c_driver:1.17.0:beta2::::mongodb::* cpe:2.3:a:mongodb:c_driver:1.17.0:rc0::::mongodb::* cpe:2.3:a:mongodb:c_driver:1.17.1:::::mongodb:: cpe:2.3:a:mongodb:c_driver:1.17.2:::::mongodb:: cpe:2.3:a:mongodb:c_driver:1.17.3:::::mongodb:: cpe:2.3:a:mongodb:c_driver:1.17.4:::::mongodb:: cpe:2.3:a:mongodb:c_driver:1.17.5:::::mongodb:: cpe:2.3:a:mongodb:c_driver:1.17.6:::::mongodb:: cpe:2.3:a:mongodb:c_driver:1.17.7:::::mongodb:: cpe:2.3:a:mongodb:c_driver:1.18.0:alpha::::mongodb::* cpe:2.3:a:mongodb:c_driver:1.18.0:alpha2::::mongodb::* cpe:2.3:a:mongodb:c_driver:1.18.0:::::mongodb:: cpe:2.3:a:mongodb:c_driver:1.19.0:::::mongodb:: cpe:2.3:a:mongodb:c_driver:1.19.1:::::mongodb:: cpe:2.3:a:mongodb:c_driver:1.19.2:::::mongodb:: cpe:2.3:a:mongodb:c_driver:1.20.0:::::mongodb:: cpe:2.3:a:mongodb:c_driver:1.20.1:::::mongodb:: cpe:2.3:a:mongodb:c_driver:1.21.0:::::mongodb:: cpe:2.3:a:mongodb:c_driver:1.21.0:beta0::::mongodb::* cpe:2.3:a:mongodb:c_driver:1.21.1:::::mongodb:: cpe:2.3:a:mongodb:c_driver:1.21.2:::::mongodb:: cpe:2.3:a:mongodb:c_driver:1.22.0:::::mongodb:: cpe:2.3:a:mongodb:c_driver:1.22.1:::::mongodb:: cpe:2.3:a:mongodb:c_driver:1.22.2:::::mongodb:: cpe:2.3:a:mongodb:c_driver:1.23.0:::::mongodb:: cpe:2.3:a:mongodb:c_driver:1.23.1:::::mongodb:: cpe:2.3:a:mongodb:c_driver:1.23.2:::::mongodb:: cpe:2.3:a:mongodb:c_driver:1.23.3:::::mongodb:: cpe:2.3:a:mongodb:c_driver:1.23.4:::::mongodb:: cpe:2.3:a:mongodb:c_driver:1.23.5:::::mongodb:: cpe:2.3:a:mongodb:c_driver:1.24.0:::::mongodb:: cpe:2.3:a:mongodb:c_driver:1.24.1:::::mongodb:: cpe:2.3:a:mongodb:c_driver:1.24.2:::::mongodb:: cpe:2.3:a:mongodb:c_driver:1.24.3:::::mongodb:: cpe:2.3:a:mongodb:c_driver:1.24.4:::::mongodb:: cpe:2.3:a:mongodb:c_driver:1.25.0:::::mongodb:: cpe:2.3:a:mongodb:c_driver:1.25.1:::::mongodb:: cpe:2.3:a:mongodb:c_driver:1.25.2:::::mongodb:: cpe:2.3:a:mongodb:c_driver:1.25.3:::::mongodb:: cpe:2.3:a:mongodb:c_driver:1.25.4:::::mongodb:: cpe:2.3:a:mongodb:c_driver:1.26.0:::::mongodb:: cpe:2.3:a:mongodb:c_driver:1.26.1:::::mongodb:: cpe:2.3:a:mongodb:php_driver:0.1.0:::::mongodb:: cpe:2.3:a:mongodb:php_driver:0.1.1:::::mongodb:: cpe:2.3:a:mongodb:php_driver:0.1.2:::::mongodb:: cpe:2.3:a:mongodb:php_driver:0.1.3:::::mongodb:: cpe:2.3:a:mongodb:php_driver:0.1.4:::::mongodb:: cpe:2.3:a:mongodb:php_driver:0.1.5:::::mongodb:: cpe:2.3:a:mongodb:php_driver:0.2.0:::::mongodb:: cpe:2.3:a:mongodb:php_driver:0.3.0:::::mongodb:: cpe:2.3:a:mongodb:php_driver:0.3.1:::::mongodb:: cpe:2.3:a:mongodb:php_driver:0.4.0:::::mongodb:: cpe:2.3:a:mongodb:php_driver:0.4.1:::::mongodb:: cpe:2.3:a:mongodb:php_driver:0.5.0:::::mongodb:: cpe:2.3:a:mongodb:php_driver:0.5.1:::::mongodb:: cpe:2.3:a:mongodb:php_driver:0.6.0:::::mongodb:: cpe:2.3:a:mongodb:php_driver:0.6.1:::::mongodb:: cpe:2.3:a:mongodb:php_driver:0.6.2:::::mongodb:: cpe:2.3:a:mongodb:php_driver:0.6.3:::::mongodb:: cpe:2.3:a:mongodb:php_driver:1.0.0:-::::mongodb::* cpe:2.3:a:mongodb:php_driver:1.0.0:alpha1::::mongodb::* cpe:2.3:a:mongodb:php_driver:1.0.0:alpha2::::mongodb::* cpe:2.3:a:mongodb:php_driver:1.0.0:beta1::::mongodb::* cpe:2.3:a:mongodb:php_driver:1.0.0:beta2::::mongodb::* cpe:2.3:a:mongodb:php_driver:1.0.0:rc0::::mongodb::* cpe:2.3:a:mongodb:php_driver:1.0.1:::::mongodb:: cpe:2.3:a:mongodb:php_driver:1.1.0:::::mongodb:: cpe:2.3:a:mongodb:php_driver:1.1.1:::::mongodb:: cpe:2.3:a:mongodb:php_driver:1.1.2:::::mongodb:: cpe:2.3:a:mongodb:php_driver:1.1.3:::::mongodb:: cpe:2.3:a:mongodb:php_driver:1.1.4:::::mongodb:: cpe:2.3:a:mongodb:php_driver:1.1.5:::::mongodb:: cpe:2.3:a:mongodb:php_driver:1.1.6:::::mongodb:: cpe:2.3:a:mongodb:php_driver:1.1.7:::::mongodb:: cpe:2.3:a:mongodb:php_driver:1.1.8:::::mongodb:: cpe:2.3:a:mongodb:php_driver:1.1.9:::::mongodb:: cpe:2.3:a:mongodb:php_driver:1.1.10:::::mongodb:: cpe:2.3:a:mongodb:php_driver:1.2.0:-::::mongodb::* cpe:2.3:a:mongodb:php_driver:1.2.0:alpha1::::mongodb::* cpe:2.3:a:mongodb:php_driver:1.2.0:alpha2::::mongodb::* cpe:2.3:a:mongodb:php_driver:1.2.0:alpha3::::mongodb::* cpe:2.3:a:mongodb:php_driver:1.2.1:::::mongodb:: cpe:2.3:a:mongodb:php_driver:1.2.2:::::mongodb:: cpe:2.3:a:mongodb:php_driver:1.2.3:::::mongodb:: cpe:2.3:a:mongodb:php_driver:1.2.4:::::mongodb:: cpe:2.3:a:mongodb:php_driver:1.2.5:::::mongodb:: cpe:2.3:a:mongodb:php_driver:1.2.6:::::mongodb:: cpe:2.3:a:mongodb:php_driver:1.2.7:::::mongodb:: cpe:2.3:a:mongodb:php_driver:1.2.8:::::mongodb:: cpe:2.3:a:mongodb:php_driver:1.2.9:::::mongodb:: cpe:2.3:a:mongodb:php_driver:1.2.10:::::mongodb:: cpe:2.3:a:mongodb:php_driver:1.2.11:::::mongodb:: cpe:2.3:a:mongodb:php_driver:1.3.0:-::::mongodb::* cpe:2.3:a:mongodb:php_driver:1.3.0:beta1::::mongodb::* cpe:2.3:a:mongodb:php_driver:1.3.0:beta2::::mongodb::* cpe:2.3:a:mongodb:php_driver:1.3.0:rc1::::mongodb::* cpe:2.3:a:mongodb:php_driver:1.3.1:::::mongodb:: cpe:2.3:a:mongodb:php_driver:1.3.2:::::mongodb:: cpe:2.3:a:mongodb:php_driver:1.3.3:::::mongodb:: cpe:2.3:a:mongodb:php_driver:1.3.4:::::mongodb:: cpe:2.3:a:mongodb:php_driver:1.4.0:-::::mongodb::* cpe:2.3:a:mongodb:php_driver:1.4.0:beta1::::mongodb::* cpe:2.3:a:mongodb:php_driver:1.4.0:rc1::::mongodb::* cpe:2.3:a:mongodb:php_driver:1.4.0:rc2::::mongodb::* cpe:2.3:a:mongodb:php_driver:1.4.1:::::mongodb:: cpe:2.3:a:mongodb:php_driver:1.4.2:::::mongodb:: cpe:2.3:a:mongodb:php_driver:1.4.3:::::mongodb:: cpe:2.3:a:mongodb:php_driver:1.4.4:::::mongodb:: cpe:2.3:a:mongodb:php_driver:1.5.0:::::mongodb:: cpe:2.3:a:mongodb:php_driver:1.5.1:::::mongodb:: cpe:2.3:a:mongodb:php_driver:1.5.2:::::mongodb:: cpe:2.3:a:mongodb:php_driver:1.5.3:::::mongodb:: cpe:2.3:a:mongodb:php_driver:1.5.4:::::mongodb:: cpe:2.3:a:mongodb:php_driver:1.5.5:::::mongodb:: cpe:2.3:a:mongodb:php_driver:1.6.0:-::::mongodb::* cpe:2.3:a:mongodb:php_driver:1.6.0:alpha1::::mongodb::* cpe:2.3:a:mongodb:php_driver:1.6.0:alpha2::::mongodb::* cpe:2.3:a:mongodb:php_driver:1.6.0:alpha3::::mongodb::* cpe:2.3:a:mongodb:php_driver:1.6.0:rc1::::mongodb::* cpe:2.3:a:mongodb:php_driver:1.6.1:::::mongodb:: cpe:2.3:a:mongodb:php_driver:1.7.0:::::mongodb:: cpe:2.3:a:mongodb:php_driver:1.7.1:::::mongodb:: cpe:2.3:a:mongodb:php_driver:1.7.2:::::mongodb:: cpe:2.3:a:mongodb:php_driver:1.7.3:::::mongodb:: cpe:2.3:a:mongodb:php_driver:1.7.4:::::mongodb:: cpe:2.3:a:mongodb:php_driver:1.7.5:::::mongodb:: cpe:2.3:a:mongodb:php_driver:1.8.0:-::::mongodb::* cpe:2.3:a:mongodb:php_driver:1.8.0:beta1::::mongodb::* cpe:2.3:a:mongodb:php_driver:1.8.0:beta2::::mongodb::* cpe:2.3:a:mongodb:php_driver:1.8.0:rc1::::mongodb::* cpe:2.3:a:mongodb:php_driver:1.8.1:::::mongodb:: cpe:2.3:a:mongodb:php_driver:1.8.2:::::mongodb:: cpe:2.3:a:mongodb:php_driver:1.9.0:-::::mongodb::* cpe:2.3:a:mongodb:php_driver:1.9.0:rc1::::mongodb::* cpe:2.3:a:mongodb:php_driver:1.9.1:::::mongodb:: cpe:2.3:a:mongodb:php_driver:1.9.2:::::mongodb:: cpe:2.3:a:mongodb:php_driver:1.10.0:alpha1::::mongodb::* cpe:2.3:a:mongodb:php_driver:1.10.0:::::mongodb:: cpe:2.3:a:mongodb:php_driver:1.11.0:alpha1::::mongodb::* cpe:2.3:a:mongodb:php_driver:1.11.0:::::mongodb:: cpe:2.3:a:mongodb:php_driver:1.11.1:::::mongodb:: cpe:2.3:a:mongodb:php_driver:1.12.0:::::mongodb:: cpe:2.3:a:mongodb:php_driver:1.12.1:::::mongodb:: cpe:2.3:a:mongodb:php_driver:1.13.0:::::mongodb:: cpe:2.3:a:mongodb:php_driver:1.14.0:beta1::::mongodb::* cpe:2.3:a:mongodb:php_driver:1.14.0:::::mongodb:: cpe:2.3:a:mongodb:php_driver:1.14.1:::::mongodb:: cpe:2.3:a:mongodb:php_driver:1.14.2:::::mongodb:: cpe:2.3:a:mongodb:php_driver:1.15.0:::::mongodb:: cpe:2.3:a:mongodb:php_driver:1.15.1:::::mongodb:: cpe:2.3:a:mongodb:php_driver:1.15.2:::::mongodb:: cpe:2.3:a:mongodb:php_driver:1.15.3:::::mongodb:: cpe:2.3:a:mongodb:php_driver:1.16.0:::::mongodb:: cpe:2.3:a:mongodb:php_driver:1.16.1:::::mongodb:: cpe:2.3:a:mongodb:php_driver:1.16.2:::::mongodb:: cpe:2.3:a:mongodb:php_driver:1.17.0:::::mongodb:: cpe:2.3:a:mongodb:php_driver:1.17.1:::::mongodb:: cpe:2.3:a:mongodb:php_driver:1.17.2:::::mongodb:: cpe:2.3:a:mongodb:php_driver:1.17.3:::::mongodb:: cpe:2.3:a:mongodb:php_driver:1.18.0:::::mongodb::
MongoDB Inc	MongoDB C Driver	Affected: 0 , < 1.26.2 (custom)
MongoDB Inc	MongoDB PHP Driver	Affected: 0 , < 1.18.1 (custom)

Date Public

2024-08-07 09:55

Credits

T. Doğa Gelişli

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2024-7553",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "total"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2024-08-07T15:27:26.847490Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2024-08-07T15:27:46.258Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "cpes": [
            "cpe:2.3:a:mongodb:mongodb:5.0.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:mongodb:mongodb:5.0.1:*:*:*:*:*:*:*",
            "cpe:2.3:a:mongodb:mongodb:5.0.2:*:*:*:*:*:*:*",
            "cpe:2.3:a:mongodb:mongodb:5.0.3:*:*:*:*:*:*:*",
            "cpe:2.3:a:mongodb:mongodb:5.0.4:*:*:*:*:*:*:*",
            "cpe:2.3:a:mongodb:mongodb:5.0.5:*:*:*:*:*:*:*",
            "cpe:2.3:a:mongodb:mongodb:5.0.6:*:*:*:*:*:*:*",
            "cpe:2.3:a:mongodb:mongodb:5.0.7:*:*:*:*:*:*:*",
            "cpe:2.3:a:mongodb:mongodb:5.0.8:*:*:*:*:*:*:*",
            "cpe:2.3:a:mongodb:mongodb:5.0.9:*:*:*:*:*:*:*",
            "cpe:2.3:a:mongodb:mongodb:5.0.10:*:*:*:*:*:*:*",
            "cpe:2.3:a:mongodb:mongodb:5.0.11:*:*:*:*:*:*:*",
            "cpe:2.3:a:mongodb:mongodb:5.0.12:*:*:*:*:*:*:*",
            "cpe:2.3:a:mongodb:mongodb:5.0.13:*:*:*:*:*:*:*",
            "cpe:2.3:a:mongodb:mongodb:5.0.14:*:*:*:*:*:*:*",
            "cpe:2.3:a:mongodb:mongodb:5.0.15:*:*:*:*:*:*:*",
            "cpe:2.3:a:mongodb:mongodb:5.0.16:*:*:*:*:*:*:*",
            "cpe:2.3:a:mongodb:mongodb:5.0.17:*:*:*:*:*:*:*",
            "cpe:2.3:a:mongodb:mongodb:5.0.18:*:*:*:*:*:*:*",
            "cpe:2.3:a:mongodb:mongodb:5.0.19:*:*:*:*:*:*:*",
            "cpe:2.3:a:mongodb:mongodb:5.0.20:*:*:*:*:*:*:*",
            "cpe:2.3:a:mongodb:mongodb:5.0.21:*:*:*:*:*:*:*",
            "cpe:2.3:a:mongodb:mongodb:5.0.22:*:*:*:*:*:*:*",
            "cpe:2.3:a:mongodb:mongodb:5.0.23:*:*:*:*:*:*:*",
            "cpe:2.3:a:mongodb:mongodb:5.0.24:*:*:*:*:*:*:*",
            "cpe:2.3:a:mongodb:mongodb:5.0.25:*:*:*:*:*:*:*",
            "cpe:2.3:a:mongodb:mongodb:5.0.26:*:*:*:*:*:*:*",
            "cpe:2.3:a:mongodb:mongodb:6.0.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:mongodb:mongodb:6.0.1:*:*:*:*:*:*:*",
            "cpe:2.3:a:mongodb:mongodb:6.0.2:*:*:*:*:*:*:*",
            "cpe:2.3:a:mongodb:mongodb:6.0.3:*:*:*:*:*:*:*",
            "cpe:2.3:a:mongodb:mongodb:6.0.4:*:*:*:*:*:*:*",
            "cpe:2.3:a:mongodb:mongodb:6.0.5:*:*:*:*:*:*:*",
            "cpe:2.3:a:mongodb:mongodb:6.0.6:*:*:*:*:*:*:*",
            "cpe:2.3:a:mongodb:mongodb:6.0.7:*:*:*:*:*:*:*",
            "cpe:2.3:a:mongodb:mongodb:6.0.8:*:*:*:*:*:*:*",
            "cpe:2.3:a:mongodb:mongodb:6.0.9:*:*:*:*:*:*:*",
            "cpe:2.3:a:mongodb:mongodb:6.0.10:*:*:*:*:*:*:*",
            "cpe:2.3:a:mongodb:mongodb:6.0.11:*:*:*:*:*:*:*",
            "cpe:2.3:a:mongodb:mongodb:6.0.12:*:*:*:*:*:*:*",
            "cpe:2.3:a:mongodb:mongodb:6.0.13:*:*:*:*:*:*:*",
            "cpe:2.3:a:mongodb:mongodb:6.0.14:*:*:*:*:*:*:*",
            "cpe:2.3:a:mongodb:mongodb:6.0.15:*:*:*:*:*:*:*",
            "cpe:2.3:a:mongodb:mongodb:7.0.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:mongodb:mongodb:7.0.1:*:*:*:*:*:*:*",
            "cpe:2.3:a:mongodb:mongodb:7.0.2:*:*:*:*:*:*:*",
            "cpe:2.3:a:mongodb:mongodb:7.0.3:*:*:*:*:*:*:*",
            "cpe:2.3:a:mongodb:mongodb:7.0.4:*:*:*:*:*:*:*",
            "cpe:2.3:a:mongodb:mongodb:7.0.5:*:*:*:*:*:*:*",
            "cpe:2.3:a:mongodb:mongodb:7.0.6:*:*:*:*:*:*:*",
            "cpe:2.3:a:mongodb:mongodb:7.0.7:*:*:*:*:*:*:*",
            "cpe:2.3:a:mongodb:mongodb:7.0.8:*:*:*:*:*:*:*",
            "cpe:2.3:a:mongodb:mongodb:7.0.9:*:*:*:*:*:*:*",
            "cpe:2.3:a:mongodb:mongodb:7.0.10:*:*:*:*:*:*:*",
            "cpe:2.3:a:mongodb:mongodb:7.0.11:*:*:*:*:*:*:*",
            "cpe:2.3:a:mongodb:mongodb:7.3.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:mongodb:mongodb:7.3.1:*:*:*:*:*:*:*",
            "cpe:2.3:a:mongodb:mongodb:7.3.2:*:*:*:*:*:*:*",
            "cpe:2.3:a:mongodb:c_driver:0.1:*:*:*:*:mongodb:*:*",
            "cpe:2.3:a:mongodb:c_driver:0.2:*:*:*:*:mongodb:*:*",
            "cpe:2.3:a:mongodb:c_driver:0.3:*:*:*:*:mongodb:*:*",
            "cpe:2.3:a:mongodb:c_driver:0.3.1:*:*:*:*:mongodb:*:*",
            "cpe:2.3:a:mongodb:c_driver:0.4:*:*:*:*:mongodb:*:*",
            "cpe:2.3:a:mongodb:c_driver:0.5:*:*:*:*:mongodb:*:*",
            "cpe:2.3:a:mongodb:c_driver:0.5.1:*:*:*:*:mongodb:*:*",
            "cpe:2.3:a:mongodb:c_driver:0.5.2:*:*:*:*:mongodb:*:*",
            "cpe:2.3:a:mongodb:c_driver:0.6:*:*:*:*:mongodb:*:*",
            "cpe:2.3:a:mongodb:c_driver:0.7:*:*:*:*:mongodb:*:*",
            "cpe:2.3:a:mongodb:c_driver:0.7.1:*:*:*:*:mongodb:*:*",
            "cpe:2.3:a:mongodb:c_driver:0.8:*:*:*:*:mongodb:*:*",
            "cpe:2.3:a:mongodb:c_driver:0.8.1:*:*:*:*:mongodb:*:*",
            "cpe:2.3:a:mongodb:c_driver:0.90.0:*:*:*:*:mongodb:*:*",
            "cpe:2.3:a:mongodb:c_driver:0.92.0:*:*:*:*:mongodb:*:*",
            "cpe:2.3:a:mongodb:c_driver:0.92.2:*:*:*:*:mongodb:*:*",
            "cpe:2.3:a:mongodb:c_driver:0.94.0:*:*:*:*:mongodb:*:*",
            "cpe:2.3:a:mongodb:c_driver:0.94.2:*:*:*:*:mongodb:*:*",
            "cpe:2.3:a:mongodb:c_driver:0.96.0:*:*:*:*:mongodb:*:*",
            "cpe:2.3:a:mongodb:c_driver:0.96.2:*:*:*:*:mongodb:*:*",
            "cpe:2.3:a:mongodb:c_driver:0.96.4:*:*:*:*:mongodb:*:*",
            "cpe:2.3:a:mongodb:c_driver:0.98.0:*:*:*:*:mongodb:*:*",
            "cpe:2.3:a:mongodb:c_driver:0.98.2:*:*:*:*:mongodb:*:*",
            "cpe:2.3:a:mongodb:c_driver:1.0.0:*:*:*:*:mongodb:*:*",
            "cpe:2.3:a:mongodb:c_driver:1.0.2:*:*:*:*:mongodb:*:*",
            "cpe:2.3:a:mongodb:c_driver:1.1.0:-:*:*:*:mongodb:*:*",
            "cpe:2.3:a:mongodb:c_driver:1.1.0:rc0:*:*:*:mongodb:*:*",
            "cpe:2.3:a:mongodb:c_driver:1.1.2:*:*:*:*:mongodb:*:*",
            "cpe:2.3:a:mongodb:c_driver:1.1.4:*:*:*:*:mongodb:*:*",
            "cpe:2.3:a:mongodb:c_driver:1.1.5:*:*:*:*:mongodb:*:*",
            "cpe:2.3:a:mongodb:c_driver:1.1.6:*:*:*:*:mongodb:*:*",
            "cpe:2.3:a:mongodb:c_driver:1.1.7:*:*:*:*:mongodb:*:*",
            "cpe:2.3:a:mongodb:c_driver:1.1.8:*:*:*:*:mongodb:*:*",
            "cpe:2.3:a:mongodb:c_driver:1.1.9:*:*:*:*:mongodb:*:*",
            "cpe:2.3:a:mongodb:c_driver:1.1.10:*:*:*:*:mongodb:*:*",
            "cpe:2.3:a:mongodb:c_driver:1.1.11:*:*:*:*:mongodb:*:*",
            "cpe:2.3:a:mongodb:c_driver:1.2.0:-:*:*:*:mongodb:*:*",
            "cpe:2.3:a:mongodb:c_driver:1.2.0:beta:*:*:*:mongodb:*:*",
            "cpe:2.3:a:mongodb:c_driver:1.2.0:beta1:*:*:*:mongodb:*:*",
            "cpe:2.3:a:mongodb:c_driver:1.2.0:rc0:*:*:*:mongodb:*:*",
            "cpe:2.3:a:mongodb:c_driver:1.2.1:*:*:*:*:mongodb:*:*",
            "cpe:2.3:a:mongodb:c_driver:1.2.2:*:*:*:*:mongodb:*:*",
            "cpe:2.3:a:mongodb:c_driver:1.2.3:*:*:*:*:mongodb:*:*",
            "cpe:2.3:a:mongodb:c_driver:1.2.4:*:*:*:*:mongodb:*:*",
            "cpe:2.3:a:mongodb:c_driver:1.3.0:-:*:*:*:mongodb:*:*",
            "cpe:2.3:a:mongodb:c_driver:1.3.0:beta0:*:*:*:mongodb:*:*",
            "cpe:2.3:a:mongodb:c_driver:1.3.0:rc0:*:*:*:mongodb:*:*",
            "cpe:2.3:a:mongodb:c_driver:1.3.1:*:*:*:*:mongodb:*:*",
            "cpe:2.3:a:mongodb:c_driver:1.3.2:*:*:*:*:mongodb:*:*",
            "cpe:2.3:a:mongodb:c_driver:1.3.3:*:*:*:*:mongodb:*:*",
            "cpe:2.3:a:mongodb:c_driver:1.3.4:*:*:*:*:mongodb:*:*",
            "cpe:2.3:a:mongodb:c_driver:1.3.5:*:*:*:*:mongodb:*:*",
            "cpe:2.3:a:mongodb:c_driver:1.3.6:*:*:*:*:mongodb:*:*",
            "cpe:2.3:a:mongodb:c_driver:1.4.0:-:*:*:*:mongodb:*:*",
            "cpe:2.3:a:mongodb:c_driver:1.4.0:beta0:*:*:*:mongodb:*:*",
            "cpe:2.3:a:mongodb:c_driver:1.4.0:beta1:*:*:*:mongodb:*:*",
            "cpe:2.3:a:mongodb:c_driver:1.4.1:*:*:*:*:mongodb:*:*",
            "cpe:2.3:a:mongodb:c_driver:1.4.2:*:*:*:*:mongodb:*:*",
            "cpe:2.3:a:mongodb:c_driver:1.4.3:*:*:*:*:mongodb:*:*",
            "cpe:2.3:a:mongodb:c_driver:1.5.0:-:*:*:*:mongodb:*:*",
            "cpe:2.3:a:mongodb:c_driver:1.5.0:rc0:*:*:*:mongodb:*:*",
            "cpe:2.3:a:mongodb:c_driver:1.5.0:rc1:*:*:*:mongodb:*:*",
            "cpe:2.3:a:mongodb:c_driver:1.5.0:rc2:*:*:*:mongodb:*:*",
            "cpe:2.3:a:mongodb:c_driver:1.5.0:rc3:*:*:*:mongodb:*:*",
            "cpe:2.3:a:mongodb:c_driver:1.5.0:rc4:*:*:*:mongodb:*:*",
            "cpe:2.3:a:mongodb:c_driver:1.5.0:rc6:*:*:*:mongodb:*:*",
            "cpe:2.3:a:mongodb:c_driver:1.5.1:*:*:*:*:mongodb:*:*",
            "cpe:2.3:a:mongodb:c_driver:1.5.2:*:*:*:*:mongodb:*:*",
            "cpe:2.3:a:mongodb:c_driver:1.5.3:*:*:*:*:mongodb:*:*",
            "cpe:2.3:a:mongodb:c_driver:1.5.4:*:*:*:*:mongodb:*:*",
            "cpe:2.3:a:mongodb:c_driver:1.5.5:*:*:*:*:mongodb:*:*",
            "cpe:2.3:a:mongodb:c_driver:1.6.0:-:*:*:*:mongodb:*:*",
            "cpe:2.3:a:mongodb:c_driver:1.6.0:rc0:*:*:*:mongodb:*:*",
            "cpe:2.3:a:mongodb:c_driver:1.6.1:*:*:*:*:mongodb:*:*",
            "cpe:2.3:a:mongodb:c_driver:1.6.2:*:*:*:*:mongodb:*:*",
            "cpe:2.3:a:mongodb:c_driver:1.6.3:*:*:*:*:mongodb:*:*",
            "cpe:2.3:a:mongodb:c_driver:1.7.0:-:*:*:*:mongodb:*:*",
            "cpe:2.3:a:mongodb:c_driver:1.7.0:rc0:*:*:*:mongodb:*:*",
            "cpe:2.3:a:mongodb:c_driver:1.7.0:rc1:*:*:*:mongodb:*:*",
            "cpe:2.3:a:mongodb:c_driver:1.7.0:rc2:*:*:*:mongodb:*:*",
            "cpe:2.3:a:mongodb:c_driver:1.8.0:-:*:*:*:mongodb:*:*",
            "cpe:2.3:a:mongodb:c_driver:1.8.0:rc0:*:*:*:mongodb:*:*",
            "cpe:2.3:a:mongodb:c_driver:1.8.0:rc1:*:*:*:mongodb:*:*",
            "cpe:2.3:a:mongodb:c_driver:1.8.1:*:*:*:*:mongodb:*:*",
            "cpe:2.3:a:mongodb:c_driver:1.8.2:*:*:*:*:mongodb:*:*",
            "cpe:2.3:a:mongodb:c_driver:1.9.0:-:*:*:*:mongodb:*:*",
            "cpe:2.3:a:mongodb:c_driver:1.9.0:rc0:*:*:*:mongodb:*:*",
            "cpe:2.3:a:mongodb:c_driver:1.9.0:rc1:*:*:*:mongodb:*:*",
            "cpe:2.3:a:mongodb:c_driver:1.9.1:*:*:*:*:mongodb:*:*",
            "cpe:2.3:a:mongodb:c_driver:1.9.2:*:*:*:*:mongodb:*:*",
            "cpe:2.3:a:mongodb:c_driver:1.9.3:*:*:*:*:mongodb:*:*",
            "cpe:2.3:a:mongodb:c_driver:1.9.4:*:*:*:*:mongodb:*:*",
            "cpe:2.3:a:mongodb:c_driver:1.9.5:*:*:*:*:mongodb:*:*",
            "cpe:2.3:a:mongodb:c_driver:1.10.0:*:*:*:*:mongodb:*:*",
            "cpe:2.3:a:mongodb:c_driver:1.10.1:*:*:*:*:mongodb:*:*",
            "cpe:2.3:a:mongodb:c_driver:1.10.2:*:*:*:*:mongodb:*:*",
            "cpe:2.3:a:mongodb:c_driver:1.10.3:*:*:*:*:mongodb:*:*",
            "cpe:2.3:a:mongodb:c_driver:1.11.0:*:*:*:*:mongodb:*:*",
            "cpe:2.3:a:mongodb:c_driver:1.12.0:*:*:*:*:mongodb:*:*",
            "cpe:2.3:a:mongodb:c_driver:1.13.0:*:*:*:*:mongodb:*:*",
            "cpe:2.3:a:mongodb:c_driver:1.13.1:*:*:*:*:mongodb:*:*",
            "cpe:2.3:a:mongodb:c_driver:1.14.0:*:*:*:*:mongodb:*:*",
            "cpe:2.3:a:mongodb:c_driver:1.14.1:*:*:*:*:mongodb:*:*",
            "cpe:2.3:a:mongodb:c_driver:1.15.0:*:*:*:*:mongodb:*:*",
            "cpe:2.3:a:mongodb:c_driver:1.15.1:*:*:*:*:mongodb:*:*",
            "cpe:2.3:a:mongodb:c_driver:1.15.2:*:*:*:*:mongodb:*:*",
            "cpe:2.3:a:mongodb:c_driver:1.15.3:*:*:*:*:mongodb:*:*",
            "cpe:2.3:a:mongodb:c_driver:1.16.0:*:*:*:*:mongodb:*:*",
            "cpe:2.3:a:mongodb:c_driver:1.16.1:*:*:*:*:mongodb:*:*",
            "cpe:2.3:a:mongodb:c_driver:1.16.2:*:*:*:*:mongodb:*:*",
            "cpe:2.3:a:mongodb:c_driver:1.17.0:-:*:*:*:mongodb:*:*",
            "cpe:2.3:a:mongodb:c_driver:1.17.0:beta:*:*:*:mongodb:*:*",
            "cpe:2.3:a:mongodb:c_driver:1.17.0:beta2:*:*:*:mongodb:*:*",
            "cpe:2.3:a:mongodb:c_driver:1.17.0:rc0:*:*:*:mongodb:*:*",
            "cpe:2.3:a:mongodb:c_driver:1.17.1:*:*:*:*:mongodb:*:*",
            "cpe:2.3:a:mongodb:c_driver:1.17.2:*:*:*:*:mongodb:*:*",
            "cpe:2.3:a:mongodb:c_driver:1.17.3:*:*:*:*:mongodb:*:*",
            "cpe:2.3:a:mongodb:c_driver:1.17.4:*:*:*:*:mongodb:*:*",
            "cpe:2.3:a:mongodb:c_driver:1.17.5:*:*:*:*:mongodb:*:*",
            "cpe:2.3:a:mongodb:c_driver:1.17.6:*:*:*:*:mongodb:*:*",
            "cpe:2.3:a:mongodb:c_driver:1.17.7:*:*:*:*:mongodb:*:*",
            "cpe:2.3:a:mongodb:c_driver:1.18.0:alpha:*:*:*:mongodb:*:*",
            "cpe:2.3:a:mongodb:c_driver:1.18.0:alpha2:*:*:*:mongodb:*:*",
            "cpe:2.3:a:mongodb:c_driver:1.18.0:*:*:*:*:mongodb:*:*",
            "cpe:2.3:a:mongodb:c_driver:1.19.0:*:*:*:*:mongodb:*:*",
            "cpe:2.3:a:mongodb:c_driver:1.19.1:*:*:*:*:mongodb:*:*",
            "cpe:2.3:a:mongodb:c_driver:1.19.2:*:*:*:*:mongodb:*:*",
            "cpe:2.3:a:mongodb:c_driver:1.20.0:*:*:*:*:mongodb:*:*",
            "cpe:2.3:a:mongodb:c_driver:1.20.1:*:*:*:*:mongodb:*:*",
            "cpe:2.3:a:mongodb:c_driver:1.21.0:*:*:*:*:mongodb:*:*",
            "cpe:2.3:a:mongodb:c_driver:1.21.0:beta0:*:*:*:mongodb:*:*",
            "cpe:2.3:a:mongodb:c_driver:1.21.1:*:*:*:*:mongodb:*:*",
            "cpe:2.3:a:mongodb:c_driver:1.21.2:*:*:*:*:mongodb:*:*",
            "cpe:2.3:a:mongodb:c_driver:1.22.0:*:*:*:*:mongodb:*:*",
            "cpe:2.3:a:mongodb:c_driver:1.22.1:*:*:*:*:mongodb:*:*",
            "cpe:2.3:a:mongodb:c_driver:1.22.2:*:*:*:*:mongodb:*:*",
            "cpe:2.3:a:mongodb:c_driver:1.23.0:*:*:*:*:mongodb:*:*",
            "cpe:2.3:a:mongodb:c_driver:1.23.1:*:*:*:*:mongodb:*:*",
            "cpe:2.3:a:mongodb:c_driver:1.23.2:*:*:*:*:mongodb:*:*",
            "cpe:2.3:a:mongodb:c_driver:1.23.3:*:*:*:*:mongodb:*:*",
            "cpe:2.3:a:mongodb:c_driver:1.23.4:*:*:*:*:mongodb:*:*",
            "cpe:2.3:a:mongodb:c_driver:1.23.5:*:*:*:*:mongodb:*:*",
            "cpe:2.3:a:mongodb:c_driver:1.24.0:*:*:*:*:mongodb:*:*",
            "cpe:2.3:a:mongodb:c_driver:1.24.1:*:*:*:*:mongodb:*:*",
            "cpe:2.3:a:mongodb:c_driver:1.24.2:*:*:*:*:mongodb:*:*",
            "cpe:2.3:a:mongodb:c_driver:1.24.3:*:*:*:*:mongodb:*:*",
            "cpe:2.3:a:mongodb:c_driver:1.24.4:*:*:*:*:mongodb:*:*",
            "cpe:2.3:a:mongodb:c_driver:1.25.0:*:*:*:*:mongodb:*:*",
            "cpe:2.3:a:mongodb:c_driver:1.25.1:*:*:*:*:mongodb:*:*",
            "cpe:2.3:a:mongodb:c_driver:1.25.2:*:*:*:*:mongodb:*:*",
            "cpe:2.3:a:mongodb:c_driver:1.25.3:*:*:*:*:mongodb:*:*",
            "cpe:2.3:a:mongodb:c_driver:1.25.4:*:*:*:*:mongodb:*:*",
            "cpe:2.3:a:mongodb:c_driver:1.26.0:*:*:*:*:mongodb:*:*",
            "cpe:2.3:a:mongodb:c_driver:1.26.1:*:*:*:*:mongodb:*:*",
            "cpe:2.3:a:mongodb:php_driver:0.1.0:*:*:*:*:mongodb:*:*",
            "cpe:2.3:a:mongodb:php_driver:0.1.1:*:*:*:*:mongodb:*:*",
            "cpe:2.3:a:mongodb:php_driver:0.1.2:*:*:*:*:mongodb:*:*",
            "cpe:2.3:a:mongodb:php_driver:0.1.3:*:*:*:*:mongodb:*:*",
            "cpe:2.3:a:mongodb:php_driver:0.1.4:*:*:*:*:mongodb:*:*",
            "cpe:2.3:a:mongodb:php_driver:0.1.5:*:*:*:*:mongodb:*:*",
            "cpe:2.3:a:mongodb:php_driver:0.2.0:*:*:*:*:mongodb:*:*",
            "cpe:2.3:a:mongodb:php_driver:0.3.0:*:*:*:*:mongodb:*:*",
            "cpe:2.3:a:mongodb:php_driver:0.3.1:*:*:*:*:mongodb:*:*",
            "cpe:2.3:a:mongodb:php_driver:0.4.0:*:*:*:*:mongodb:*:*",
            "cpe:2.3:a:mongodb:php_driver:0.4.1:*:*:*:*:mongodb:*:*",
            "cpe:2.3:a:mongodb:php_driver:0.5.0:*:*:*:*:mongodb:*:*",
            "cpe:2.3:a:mongodb:php_driver:0.5.1:*:*:*:*:mongodb:*:*",
            "cpe:2.3:a:mongodb:php_driver:0.6.0:*:*:*:*:mongodb:*:*",
            "cpe:2.3:a:mongodb:php_driver:0.6.1:*:*:*:*:mongodb:*:*",
            "cpe:2.3:a:mongodb:php_driver:0.6.2:*:*:*:*:mongodb:*:*",
            "cpe:2.3:a:mongodb:php_driver:0.6.3:*:*:*:*:mongodb:*:*",
            "cpe:2.3:a:mongodb:php_driver:1.0.0:-:*:*:*:mongodb:*:*",
            "cpe:2.3:a:mongodb:php_driver:1.0.0:alpha1:*:*:*:mongodb:*:*",
            "cpe:2.3:a:mongodb:php_driver:1.0.0:alpha2:*:*:*:mongodb:*:*",
            "cpe:2.3:a:mongodb:php_driver:1.0.0:beta1:*:*:*:mongodb:*:*",
            "cpe:2.3:a:mongodb:php_driver:1.0.0:beta2:*:*:*:mongodb:*:*",
            "cpe:2.3:a:mongodb:php_driver:1.0.0:rc0:*:*:*:mongodb:*:*",
            "cpe:2.3:a:mongodb:php_driver:1.0.1:*:*:*:*:mongodb:*:*",
            "cpe:2.3:a:mongodb:php_driver:1.1.0:*:*:*:*:mongodb:*:*",
            "cpe:2.3:a:mongodb:php_driver:1.1.1:*:*:*:*:mongodb:*:*",
            "cpe:2.3:a:mongodb:php_driver:1.1.2:*:*:*:*:mongodb:*:*",
            "cpe:2.3:a:mongodb:php_driver:1.1.3:*:*:*:*:mongodb:*:*",
            "cpe:2.3:a:mongodb:php_driver:1.1.4:*:*:*:*:mongodb:*:*",
            "cpe:2.3:a:mongodb:php_driver:1.1.5:*:*:*:*:mongodb:*:*",
            "cpe:2.3:a:mongodb:php_driver:1.1.6:*:*:*:*:mongodb:*:*",
            "cpe:2.3:a:mongodb:php_driver:1.1.7:*:*:*:*:mongodb:*:*",
            "cpe:2.3:a:mongodb:php_driver:1.1.8:*:*:*:*:mongodb:*:*",
            "cpe:2.3:a:mongodb:php_driver:1.1.9:*:*:*:*:mongodb:*:*",
            "cpe:2.3:a:mongodb:php_driver:1.1.10:*:*:*:*:mongodb:*:*",
            "cpe:2.3:a:mongodb:php_driver:1.2.0:-:*:*:*:mongodb:*:*",
            "cpe:2.3:a:mongodb:php_driver:1.2.0:alpha1:*:*:*:mongodb:*:*",
            "cpe:2.3:a:mongodb:php_driver:1.2.0:alpha2:*:*:*:mongodb:*:*",
            "cpe:2.3:a:mongodb:php_driver:1.2.0:alpha3:*:*:*:mongodb:*:*",
            "cpe:2.3:a:mongodb:php_driver:1.2.1:*:*:*:*:mongodb:*:*",
            "cpe:2.3:a:mongodb:php_driver:1.2.2:*:*:*:*:mongodb:*:*",
            "cpe:2.3:a:mongodb:php_driver:1.2.3:*:*:*:*:mongodb:*:*",
            "cpe:2.3:a:mongodb:php_driver:1.2.4:*:*:*:*:mongodb:*:*",
            "cpe:2.3:a:mongodb:php_driver:1.2.5:*:*:*:*:mongodb:*:*",
            "cpe:2.3:a:mongodb:php_driver:1.2.6:*:*:*:*:mongodb:*:*",
            "cpe:2.3:a:mongodb:php_driver:1.2.7:*:*:*:*:mongodb:*:*",
            "cpe:2.3:a:mongodb:php_driver:1.2.8:*:*:*:*:mongodb:*:*",
            "cpe:2.3:a:mongodb:php_driver:1.2.9:*:*:*:*:mongodb:*:*",
            "cpe:2.3:a:mongodb:php_driver:1.2.10:*:*:*:*:mongodb:*:*",
            "cpe:2.3:a:mongodb:php_driver:1.2.11:*:*:*:*:mongodb:*:*",
            "cpe:2.3:a:mongodb:php_driver:1.3.0:-:*:*:*:mongodb:*:*",
            "cpe:2.3:a:mongodb:php_driver:1.3.0:beta1:*:*:*:mongodb:*:*",
            "cpe:2.3:a:mongodb:php_driver:1.3.0:beta2:*:*:*:mongodb:*:*",
            "cpe:2.3:a:mongodb:php_driver:1.3.0:rc1:*:*:*:mongodb:*:*",
            "cpe:2.3:a:mongodb:php_driver:1.3.1:*:*:*:*:mongodb:*:*",
            "cpe:2.3:a:mongodb:php_driver:1.3.2:*:*:*:*:mongodb:*:*",
            "cpe:2.3:a:mongodb:php_driver:1.3.3:*:*:*:*:mongodb:*:*",
            "cpe:2.3:a:mongodb:php_driver:1.3.4:*:*:*:*:mongodb:*:*",
            "cpe:2.3:a:mongodb:php_driver:1.4.0:-:*:*:*:mongodb:*:*",
            "cpe:2.3:a:mongodb:php_driver:1.4.0:beta1:*:*:*:mongodb:*:*",
            "cpe:2.3:a:mongodb:php_driver:1.4.0:rc1:*:*:*:mongodb:*:*",
            "cpe:2.3:a:mongodb:php_driver:1.4.0:rc2:*:*:*:mongodb:*:*",
            "cpe:2.3:a:mongodb:php_driver:1.4.1:*:*:*:*:mongodb:*:*",
            "cpe:2.3:a:mongodb:php_driver:1.4.2:*:*:*:*:mongodb:*:*",
            "cpe:2.3:a:mongodb:php_driver:1.4.3:*:*:*:*:mongodb:*:*",
            "cpe:2.3:a:mongodb:php_driver:1.4.4:*:*:*:*:mongodb:*:*",
            "cpe:2.3:a:mongodb:php_driver:1.5.0:*:*:*:*:mongodb:*:*",
            "cpe:2.3:a:mongodb:php_driver:1.5.1:*:*:*:*:mongodb:*:*",
            "cpe:2.3:a:mongodb:php_driver:1.5.2:*:*:*:*:mongodb:*:*",
            "cpe:2.3:a:mongodb:php_driver:1.5.3:*:*:*:*:mongodb:*:*",
            "cpe:2.3:a:mongodb:php_driver:1.5.4:*:*:*:*:mongodb:*:*",
            "cpe:2.3:a:mongodb:php_driver:1.5.5:*:*:*:*:mongodb:*:*",
            "cpe:2.3:a:mongodb:php_driver:1.6.0:-:*:*:*:mongodb:*:*",
            "cpe:2.3:a:mongodb:php_driver:1.6.0:alpha1:*:*:*:mongodb:*:*",
            "cpe:2.3:a:mongodb:php_driver:1.6.0:alpha2:*:*:*:mongodb:*:*",
            "cpe:2.3:a:mongodb:php_driver:1.6.0:alpha3:*:*:*:mongodb:*:*",
            "cpe:2.3:a:mongodb:php_driver:1.6.0:rc1:*:*:*:mongodb:*:*",
            "cpe:2.3:a:mongodb:php_driver:1.6.1:*:*:*:*:mongodb:*:*",
            "cpe:2.3:a:mongodb:php_driver:1.7.0:*:*:*:*:mongodb:*:*",
            "cpe:2.3:a:mongodb:php_driver:1.7.1:*:*:*:*:mongodb:*:*",
            "cpe:2.3:a:mongodb:php_driver:1.7.2:*:*:*:*:mongodb:*:*",
            "cpe:2.3:a:mongodb:php_driver:1.7.3:*:*:*:*:mongodb:*:*",
            "cpe:2.3:a:mongodb:php_driver:1.7.4:*:*:*:*:mongodb:*:*",
            "cpe:2.3:a:mongodb:php_driver:1.7.5:*:*:*:*:mongodb:*:*",
            "cpe:2.3:a:mongodb:php_driver:1.8.0:-:*:*:*:mongodb:*:*",
            "cpe:2.3:a:mongodb:php_driver:1.8.0:beta1:*:*:*:mongodb:*:*",
            "cpe:2.3:a:mongodb:php_driver:1.8.0:beta2:*:*:*:mongodb:*:*",
            "cpe:2.3:a:mongodb:php_driver:1.8.0:rc1:*:*:*:mongodb:*:*",
            "cpe:2.3:a:mongodb:php_driver:1.8.1:*:*:*:*:mongodb:*:*",
            "cpe:2.3:a:mongodb:php_driver:1.8.2:*:*:*:*:mongodb:*:*",
            "cpe:2.3:a:mongodb:php_driver:1.9.0:-:*:*:*:mongodb:*:*",
            "cpe:2.3:a:mongodb:php_driver:1.9.0:rc1:*:*:*:mongodb:*:*",
            "cpe:2.3:a:mongodb:php_driver:1.9.1:*:*:*:*:mongodb:*:*",
            "cpe:2.3:a:mongodb:php_driver:1.9.2:*:*:*:*:mongodb:*:*",
            "cpe:2.3:a:mongodb:php_driver:1.10.0:alpha1:*:*:*:mongodb:*:*",
            "cpe:2.3:a:mongodb:php_driver:1.10.0:*:*:*:*:mongodb:*:*",
            "cpe:2.3:a:mongodb:php_driver:1.11.0:alpha1:*:*:*:mongodb:*:*",
            "cpe:2.3:a:mongodb:php_driver:1.11.0:*:*:*:*:mongodb:*:*",
            "cpe:2.3:a:mongodb:php_driver:1.11.1:*:*:*:*:mongodb:*:*",
            "cpe:2.3:a:mongodb:php_driver:1.12.0:*:*:*:*:mongodb:*:*",
            "cpe:2.3:a:mongodb:php_driver:1.12.1:*:*:*:*:mongodb:*:*",
            "cpe:2.3:a:mongodb:php_driver:1.13.0:*:*:*:*:mongodb:*:*",
            "cpe:2.3:a:mongodb:php_driver:1.14.0:beta1:*:*:*:mongodb:*:*",
            "cpe:2.3:a:mongodb:php_driver:1.14.0:*:*:*:*:mongodb:*:*",
            "cpe:2.3:a:mongodb:php_driver:1.14.1:*:*:*:*:mongodb:*:*",
            "cpe:2.3:a:mongodb:php_driver:1.14.2:*:*:*:*:mongodb:*:*",
            "cpe:2.3:a:mongodb:php_driver:1.15.0:*:*:*:*:mongodb:*:*",
            "cpe:2.3:a:mongodb:php_driver:1.15.1:*:*:*:*:mongodb:*:*",
            "cpe:2.3:a:mongodb:php_driver:1.15.2:*:*:*:*:mongodb:*:*",
            "cpe:2.3:a:mongodb:php_driver:1.15.3:*:*:*:*:mongodb:*:*",
            "cpe:2.3:a:mongodb:php_driver:1.16.0:*:*:*:*:mongodb:*:*",
            "cpe:2.3:a:mongodb:php_driver:1.16.1:*:*:*:*:mongodb:*:*",
            "cpe:2.3:a:mongodb:php_driver:1.16.2:*:*:*:*:mongodb:*:*",
            "cpe:2.3:a:mongodb:php_driver:1.17.0:*:*:*:*:mongodb:*:*",
            "cpe:2.3:a:mongodb:php_driver:1.17.1:*:*:*:*:mongodb:*:*",
            "cpe:2.3:a:mongodb:php_driver:1.17.2:*:*:*:*:mongodb:*:*",
            "cpe:2.3:a:mongodb:php_driver:1.17.3:*:*:*:*:mongodb:*:*",
            "cpe:2.3:a:mongodb:php_driver:1.18.0:*:*:*:*:mongodb:*:*"
          ],
          "defaultStatus": "unaffected",
          "product": "MongoDB Server",
          "vendor": "MongoDB Inc",
          "versions": [
            {
              "lessThan": "5.0.27",
              "status": "affected",
              "version": "5.0",
              "versionType": "custom"
            },
            {
              "lessThan": "6.0.16",
              "status": "affected",
              "version": "6.0",
              "versionType": "custom"
            },
            {
              "lessThan": "7.0.12",
              "status": "affected",
              "version": "7.0",
              "versionType": "custom"
            },
            {
              "lessThan": "7.3.3",
              "status": "affected",
              "version": "7.3",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "product": "MongoDB C Driver",
          "vendor": "MongoDB Inc",
          "versions": [
            {
              "lessThan": "1.26.2",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "product": "MongoDB PHP Driver",
          "vendor": "MongoDB Inc",
          "versions": [
            {
              "lessThan": "1.18.1",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        }
      ],
      "configurations": [
        {
          "lang": "en",
          "supportingMedia": [
            {
              "base64": false,
              "type": "text/html",
              "value": "\u003cspan style=\"background-color: var(--wht);\"\u003eOnly environments with Windows as the underlying operating system is affected by this issue\u003c/span\u003e\u003cbr\u003e\u003ci\u003e\u003cbr\u003e\u003c/i\u003e\u003cbr\u003e"
            }
          ],
          "value": "Only environments with Windows as the underlying operating system is affected by this issue"
        }
      ],
      "credits": [
        {
          "lang": "en",
          "type": "finder",
          "value": "T. Do\u011fa Geli\u015fli"
        }
      ],
      "datePublic": "2024-08-07T09:55:00.000Z",
      "descriptions": [
        {
          "lang": "en",
          "supportingMedia": [
            {
              "base64": false,
              "type": "text/html",
              "value": "\u003cspan style=\"background-color: rgb(255, 255, 255);\"\u003eIncorrect validation of files loaded from a local untrusted directory may allow local privilege escalation if the underlying operating systems is Windows. This may result in the application executing arbitrary behaviour determined by the contents of untrusted files. This issue affects MongoDB Server v5.0 versions prior to 5.0.27, MongoDB Server v6.0 versions prior to 6.0.16, MongoDB Server v7.0 versions prior to 7.0.12, MongoDB Server v7.3 versions prior 7.3.3, MongoDB C Driver versions prior to 1.26.2 and MongoDB PHP Driver versions prior to 1.18.1.\u003c/span\u003e\u003cbr\u003e\u003cbr\u003e\u003cp\u003e\u003cb\u003eRequired Configuration:\u003c/b\u003e\u003c/p\u003e\u003cp\u003eOnly environments with Windows as the underlying operating system is affected by this issue\u003c/p\u003e"
            }
          ],
          "value": "Incorrect validation of files loaded from a local untrusted directory may allow local privilege escalation if the underlying operating systems is Windows. This may result in the application executing arbitrary behaviour determined by the contents of untrusted files. This issue affects MongoDB Server v5.0 versions prior to 5.0.27, MongoDB Server v6.0 versions prior to 6.0.16, MongoDB Server v7.0 versions prior to 7.0.12, MongoDB Server v7.3 versions prior 7.3.3, MongoDB C Driver versions prior to 1.26.2 and MongoDB PHP Driver versions prior to 1.18.1.\n\nRequired Configuration:\n\nOnly environments with Windows as the underlying operating system is affected by this issue"
        }
      ],
      "metrics": [
        {
          "cvssV3_1": {
            "attackComplexity": "LOW",
            "attackVector": "LOCAL",
            "availabilityImpact": "HIGH",
            "baseScore": 7.3,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "LOW",
            "scope": "UNCHANGED",
            "userInteraction": "REQUIRED",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "format": "CVSS",
          "scenarios": [
            {
              "lang": "en",
              "value": "GENERAL"
            }
          ]
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-284",
              "description": "CWE-284: Improper Access Control",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2024-08-07T12:51:42.281Z",
        "orgId": "a39b4221-9bd0-4244-95fc-f3e2e07f1deb",
        "shortName": "mongodb"
      },
      "references": [
        {
          "url": "https://jira.mongodb.org/browse/PHPC-2369"
        },
        {
          "url": "https://jira.mongodb.org/browse/SERVER-93211"
        },
        {
          "url": "https://jira.mongodb.org/browse/CDRIVER-5650"
        }
      ],
      "source": {
        "discovery": "EXTERNAL"
      },
      "title": "Accessing Untrusted Directory May Allow Local Privilege Escalation",
      "x_generator": {
        "engine": "Vulnogram 0.2.0"
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "a39b4221-9bd0-4244-95fc-f3e2e07f1deb",
    "assignerShortName": "mongodb",
    "cveId": "CVE-2024-7553",
    "datePublished": "2024-08-07T09:57:49.818Z",
    "dateReserved": "2024-08-06T08:34:10.195Z",
    "dateUpdated": "2024-08-07T15:27:46.258Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2021-32050 (GCVE-0-2021-32050)

Vulnerability from nvd – Published: 2023-08-29 15:24 – Updated: 2025-11-03 19:25

Title

Some MongoDB Drivers may publish events containing authentication-related data to a command listener configured by an application

Summary

Some MongoDB Drivers may erroneously publish events containing authentication-related data to a command listener configured by an application. The published events may contain security-sensitive data when specific authentication-related commands are executed. Without due care, an application may inadvertently expose this sensitive information, e.g., by writing it to a log file. This issue only arises if an application enables the command listener feature (this is not enabled by default). This issue affects the MongoDB C Driver 1.0.0 prior to 1.17.7, MongoDB PHP Driver 1.0.0 prior to 1.9.2, MongoDB Swift Driver 1.0.0 prior to 1.1.1, MongoDB Node.js Driver 3.6 prior to 3.6.10, MongoDB Node.js Driver 4.0 prior to 4.17.0 and MongoDB Node.js Driver 5.0 prior to 5.8.0. This issue also affects users of the MongoDB C++ Driver dependent on the C driver 1.0.0 prior to 1.17.7 (C++ driver prior to 3.7.0).

Severity

4.2 (Medium)


                        
                          CVSS:3.1/AV:L/AC:L/PR:H/UI:R/S:U/C:H/I:N/A:N

SSVC

Exploitation: none Automatable: no Technical Impact: partial

CISA Coordinator (v2.0.3)

CWE

CWE-200 - Exposure of Sensitive Information to an Unauthorized Actor

Assigner

mongodb

References

7 references

URL	Tags
https://jira.mongodb.org/browse/PHPC-1869
https://jira.mongodb.org/browse/CXX-2028
https://jira.mongodb.org/browse/SWIFT-1229
https://jira.mongodb.org/browse/CDRIVER-3797
https://jira.mongodb.org/browse/NODE-3356
https://security.netapp.com/advisory/ntap-2023100…
https://lists.debian.org/debian-lts-announce/2025…

Impacted products

5 products

Vendor	Product	Version
MongoDB Inc	MongoDB C Driver	Affected: 1.0.0 , < 1.17.7 (custom)
MongoDB Inc	MongoDB C++ Driver	Affected: 3.0.0 , < 3.7.0 (custom)
MongoDB Inc	MongoDB PHP Driver	Affected: 1.0.0 , < 1.9.2 (custom)
MongoDB Inc	MongoDB Swift Driver	Affected: 1.0.0 , < 1.1.1 (custom)
MongoDB Inc	MongoDB Node.js Driver	Affected: 3.6 , < 3.6.10 (custom) Affected: 4.0 , < 4.17.0 (custom) Affected: 5.0 , < 5.8.0 (custom)

Date Public

2023-08-29 16:21

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2025-11-03T19:25:48.021Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://jira.mongodb.org/browse/PHPC-1869"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://jira.mongodb.org/browse/CXX-2028"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://jira.mongodb.org/browse/SWIFT-1229"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://jira.mongodb.org/browse/CDRIVER-3797"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://jira.mongodb.org/browse/NODE-3356"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://security.netapp.com/advisory/ntap-20231006-0001/"
          },
          {
            "url": "https://lists.debian.org/debian-lts-announce/2025/05/msg00027.html"
          }
        ],
        "title": "CVE Program Container"
      },
      {
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2021-32050",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2024-09-30T17:34:56.433321Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2024-09-30T17:46:35.484Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "defaultStatus": "unaffected",
          "product": "MongoDB C Driver",
          "vendor": "MongoDB Inc",
          "versions": [
            {
              "lessThan": "1.17.7",
              "status": "affected",
              "version": "1.0.0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "product": "MongoDB C++ Driver",
          "vendor": "MongoDB Inc",
          "versions": [
            {
              "lessThan": "3.7.0",
              "status": "affected",
              "version": "3.0.0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "product": "MongoDB PHP Driver",
          "vendor": "MongoDB Inc",
          "versions": [
            {
              "lessThan": "1.9.2",
              "status": "affected",
              "version": "1.0.0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "product": "MongoDB Swift Driver",
          "vendor": "MongoDB Inc",
          "versions": [
            {
              "lessThan": "1.1.1",
              "status": "affected",
              "version": "1.0.0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "product": "MongoDB Node.js Driver",
          "vendor": "MongoDB Inc",
          "versions": [
            {
              "lessThan": "3.6.10",
              "status": "affected",
              "version": "3.6",
              "versionType": "custom"
            },
            {
              "lessThan": "4.17.0",
              "status": "affected",
              "version": "4.0",
              "versionType": "custom"
            },
            {
              "lessThan": "5.8.0",
              "status": "affected",
              "version": "5.0",
              "versionType": "custom"
            }
          ]
        }
      ],
      "configurations": [
        {
          "lang": "en",
          "supportingMedia": [
            {
              "base64": false,
              "type": "text/html",
              "value": "\u003cp\u003eThis issue only arises if an application enables the command listener feature (this is not enabled by default).\u003c/p\u003e"
            }
          ],
          "value": "This issue only arises if an application enables the command listener feature (this is not enabled by default)."
        }
      ],
      "datePublic": "2023-08-29T16:21:00.000Z",
      "descriptions": [
        {
          "lang": "en",
          "supportingMedia": [
            {
              "base64": false,
              "type": "text/html",
              "value": "\u003cp\u003eSome MongoDB Drivers may erroneously publish events containing authentication-related data to a command listener configured by an application. The published events may contain security-sensitive data when specific authentication-related commands are executed.\u003c/p\u003e\u003cp\u003eWithout due care, an application may inadvertently expose this sensitive information, e.g., by writing it to a log file. This issue only arises if an application enables the command listener feature (this is not enabled by default).\u003c/p\u003e\u003cp\u003eThis issue affects the MongoDB C Driver 1.0.0 prior to 1.17.7, MongoDB PHP Driver 1.0.0 prior to 1.9.2, MongoDB Swift Driver 1.0.0 prior to 1.1.1, MongoDB Node.js Driver 3.6 prior to 3.6.10, MongoDB Node.js Driver 4.0 prior to 4.17.0 and MongoDB Node.js Driver 5.0 prior to 5.8.0. This issue also affects users of the MongoDB C++ Driver dependent on the C driver 1.0.0 prior to 1.17.7 (C++ driver prior to 3.7.0).\u003c/p\u003e"
            }
          ],
          "value": "Some MongoDB Drivers may erroneously publish events containing authentication-related data to a command listener configured by an application. The published events may contain security-sensitive data when specific authentication-related commands are executed.\n\nWithout due care, an application may inadvertently expose this sensitive information, e.g., by writing it to a log file. This issue only arises if an application enables the command listener feature (this is not enabled by default).\n\nThis issue affects the MongoDB C Driver 1.0.0 prior to 1.17.7, MongoDB PHP Driver 1.0.0 prior to 1.9.2, MongoDB Swift Driver 1.0.0 prior to 1.1.1, MongoDB Node.js Driver 3.6 prior to 3.6.10, MongoDB Node.js Driver 4.0 prior to 4.17.0 and MongoDB Node.js Driver 5.0 prior to 5.8.0. This issue also affects users of the MongoDB C++ Driver dependent on the C driver 1.0.0 prior to 1.17.7 (C++ driver prior to 3.7.0)."
        }
      ],
      "metrics": [
        {
          "cvssV3_1": {
            "attackComplexity": "LOW",
            "attackVector": "LOCAL",
            "availabilityImpact": "NONE",
            "baseScore": 4.2,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "NONE",
            "privilegesRequired": "HIGH",
            "scope": "UNCHANGED",
            "userInteraction": "REQUIRED",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:H/UI:R/S:U/C:H/I:N/A:N",
            "version": "3.1"
          },
          "format": "CVSS",
          "scenarios": [
            {
              "lang": "en",
              "value": "GENERAL"
            }
          ]
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-200",
              "description": "CWE-200 Exposure of Sensitive Information to an Unauthorized Actor",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2023-10-06T14:06:49.026Z",
        "orgId": "a39b4221-9bd0-4244-95fc-f3e2e07f1deb",
        "shortName": "mongodb"
      },
      "references": [
        {
          "url": "https://jira.mongodb.org/browse/PHPC-1869"
        },
        {
          "url": "https://jira.mongodb.org/browse/CXX-2028"
        },
        {
          "url": "https://jira.mongodb.org/browse/SWIFT-1229"
        },
        {
          "url": "https://jira.mongodb.org/browse/CDRIVER-3797"
        },
        {
          "url": "https://jira.mongodb.org/browse/NODE-3356"
        },
        {
          "url": "https://security.netapp.com/advisory/ntap-20231006-0001/"
        }
      ],
      "source": {
        "discovery": "INTERNAL"
      },
      "title": "Some MongoDB Drivers may publish events containing authentication-related data to a command listener configured by an application",
      "x_generator": {
        "engine": "Vulnogram 0.1.0-dev"
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "a39b4221-9bd0-4244-95fc-f3e2e07f1deb",
    "assignerShortName": "mongodb",
    "cveId": "CVE-2021-32050",
    "datePublished": "2023-08-29T15:24:30.389Z",
    "dateReserved": "2021-05-05T14:29:29.717Z",
    "dateUpdated": "2025-11-03T19:25:48.021Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

CVE-2025-12119 (GCVE-0-2025-12119)

Vulnerability from cvelistv5 – Published: 2025-11-18 20:21 – Updated: 2026-01-14 19:04

Title

Bulk write with options may read invalid memory

Summary

A mongoc_bulk_operation_t may read invalid memory if large options are passed.

Severity

6.9 (Medium)


                        
                          CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:L/SC:N/SI:N/SA:N

6.8 (Medium)


                        
                          CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:L

SSVC

Exploitation: none Automatable: no Technical Impact: partial

CISA Coordinator (v2.0.3)

CWE

CWE-825 - Expired Pointer Dereference

Assigner

mongodb

References

4 references

URL	Tags
https://github.com/mongodb/mongo-php-driver/relea…
https://github.com/mongodb/mongo-c-driver/release…
https://github.com/mongodb/mongo-c-driver/release…
https://lists.debian.org/debian-lts-announce/2026…

Impacted products

2 products

Vendor	Product	Version
MongoDB	C Driver	Affected: 1.9.0 , ≤ 1.30.5 (semver) Affected: 2.0.0 , ≤ 2.1.1 (semver)
MongoDB	PHP Driver	Affected: 0 , ≤ 2.1.2 (semver)

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2025-12119",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2025-11-19T16:14:28.900742Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2025-11-19T16:48:51.591Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      },
      {
        "providerMetadata": {
          "dateUpdated": "2026-01-14T19:04:31.839Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "url": "https://lists.debian.org/debian-lts-announce/2026/01/msg00009.html"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "collectionURL": "https://github.com/mongodb/mongo-c-driver",
          "defaultStatus": "unaffected",
          "product": "C Driver",
          "vendor": "MongoDB",
          "versions": [
            {
              "lessThanOrEqual": "1.30.5",
              "status": "affected",
              "version": "1.9.0",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "2.1.1",
              "status": "affected",
              "version": "2.0.0",
              "versionType": "semver"
            }
          ]
        },
        {
          "collectionURL": "https://github.com/mongodb/mongo-php-driver",
          "defaultStatus": "unaffected",
          "product": "PHP Driver",
          "vendor": "MongoDB",
          "versions": [
            {
              "lessThanOrEqual": "2.1.2",
              "status": "affected",
              "version": "0",
              "versionType": "semver"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "supportingMedia": [
            {
              "base64": false,
              "type": "text/html",
              "value": "A mongoc_bulk_operation_t may read invalid memory if large options are passed."
            }
          ],
          "value": "A mongoc_bulk_operation_t may read invalid memory if large options are passed."
        }
      ],
      "metrics": [
        {
          "cvssV4_0": {
            "Automatable": "NOT_DEFINED",
            "Recovery": "NOT_DEFINED",
            "Safety": "NOT_DEFINED",
            "attackComplexity": "LOW",
            "attackRequirements": "NONE",
            "attackVector": "LOCAL",
            "baseScore": 6.9,
            "baseSeverity": "MEDIUM",
            "exploitMaturity": "NOT_DEFINED",
            "privilegesRequired": "LOW",
            "providerUrgency": "NOT_DEFINED",
            "subAvailabilityImpact": "NONE",
            "subConfidentialityImpact": "NONE",
            "subIntegrityImpact": "NONE",
            "userInteraction": "NONE",
            "valueDensity": "NOT_DEFINED",
            "vectorString": "CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:L/SC:N/SI:N/SA:N",
            "version": "4.0",
            "vulnAvailabilityImpact": "LOW",
            "vulnConfidentialityImpact": "HIGH",
            "vulnIntegrityImpact": "NONE",
            "vulnerabilityResponseEffort": "NOT_DEFINED"
          },
          "format": "CVSS",
          "scenarios": [
            {
              "lang": "en",
              "value": "GENERAL"
            }
          ]
        },
        {
          "cvssV3_1": {
            "attackComplexity": "LOW",
            "attackVector": "LOCAL",
            "availabilityImpact": "LOW",
            "baseScore": 6.8,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:L",
            "version": "3.1"
          },
          "format": "CVSS",
          "scenarios": [
            {
              "lang": "en",
              "value": "GENERAL"
            }
          ]
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-825",
              "description": "CWE-825 Expired Pointer Dereference",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2025-11-18T20:21:08.252Z",
        "orgId": "a39b4221-9bd0-4244-95fc-f3e2e07f1deb",
        "shortName": "mongodb"
      },
      "references": [
        {
          "url": "https://github.com/mongodb/mongo-php-driver/releases/tag/1.21.2"
        },
        {
          "url": "https://github.com/mongodb/mongo-c-driver/releases/tag/1.30.6"
        },
        {
          "url": "https://github.com/mongodb/mongo-c-driver/releases/tag/2.1.2"
        }
      ],
      "source": {
        "discovery": "UNKNOWN"
      },
      "title": "Bulk write with options may read invalid memory",
      "x_generator": {
        "engine": "Vulnogram 0.5.0"
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "a39b4221-9bd0-4244-95fc-f3e2e07f1deb",
    "assignerShortName": "mongodb",
    "cveId": "CVE-2025-12119",
    "datePublished": "2025-11-18T20:21:08.252Z",
    "dateReserved": "2025-10-23T16:43:24.098Z",
    "dateUpdated": "2026-01-14T19:04:31.839Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

CVE-2024-7553 (GCVE-0-2024-7553)

Vulnerability from cvelistv5 – Published: 2024-08-07 09:57 – Updated: 2024-08-07 15:27

Title

Accessing Untrusted Directory May Allow Local Privilege Escalation

Summary

Incorrect validation of files loaded from a local untrusted directory may allow local privilege escalation if the underlying operating systems is Windows. This may result in the application executing arbitrary behaviour determined by the contents of untrusted files. This issue affects MongoDB Server v5.0 versions prior to 5.0.27, MongoDB Server v6.0 versions prior to 6.0.16, MongoDB Server v7.0 versions prior to 7.0.12, MongoDB Server v7.3 versions prior 7.3.3, MongoDB C Driver versions prior to 1.26.2 and MongoDB PHP Driver versions prior to 1.18.1. Required Configuration: Only environments with Windows as the underlying operating system is affected by this issue

Severity

7.3 (High)


                        
                          CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H

SSVC

Exploitation: none Automatable: no Technical Impact: total

CISA Coordinator (v2.0.3)

CWE

CWE-284 - Improper Access Control

Assigner

mongodb

References

3 references

URL	Tags
https://jira.mongodb.org/browse/PHPC-2369
https://jira.mongodb.org/browse/SERVER-93211
https://jira.mongodb.org/browse/CDRIVER-5650

Impacted products

3 products

Vendor	Product	Version
MongoDB Inc	MongoDB Server	Affected: 5.0 , < 5.0.27 (custom) Affected: 6.0 , < 6.0.16 (custom) Affected: 7.0 , < 7.0.12 (custom) Affected: 7.3 , < 7.3.3 (custom) cpe:2.3:a:mongodb:mongodb:5.0.0:::::::* cpe:2.3:a:mongodb:mongodb:5.0.1:::::::* cpe:2.3:a:mongodb:mongodb:5.0.2:::::::* cpe:2.3:a:mongodb:mongodb:5.0.3:::::::* cpe:2.3:a:mongodb:mongodb:5.0.4:::::::* cpe:2.3:a:mongodb:mongodb:5.0.5:::::::* cpe:2.3:a:mongodb:mongodb:5.0.6:::::::* cpe:2.3:a:mongodb:mongodb:5.0.7:::::::* cpe:2.3:a:mongodb:mongodb:5.0.8:::::::* cpe:2.3:a:mongodb:mongodb:5.0.9:::::::* cpe:2.3:a:mongodb:mongodb:5.0.10:::::::* cpe:2.3:a:mongodb:mongodb:5.0.11:::::::* cpe:2.3:a:mongodb:mongodb:5.0.12:::::::* cpe:2.3:a:mongodb:mongodb:5.0.13:::::::* cpe:2.3:a:mongodb:mongodb:5.0.14:::::::* cpe:2.3:a:mongodb:mongodb:5.0.15:::::::* cpe:2.3:a:mongodb:mongodb:5.0.16:::::::* cpe:2.3:a:mongodb:mongodb:5.0.17:::::::* cpe:2.3:a:mongodb:mongodb:5.0.18:::::::* cpe:2.3:a:mongodb:mongodb:5.0.19:::::::* cpe:2.3:a:mongodb:mongodb:5.0.20:::::::* cpe:2.3:a:mongodb:mongodb:5.0.21:::::::* cpe:2.3:a:mongodb:mongodb:5.0.22:::::::* cpe:2.3:a:mongodb:mongodb:5.0.23:::::::* cpe:2.3:a:mongodb:mongodb:5.0.24:::::::* cpe:2.3:a:mongodb:mongodb:5.0.25:::::::* cpe:2.3:a:mongodb:mongodb:5.0.26:::::::* cpe:2.3:a:mongodb:mongodb:6.0.0:::::::* cpe:2.3:a:mongodb:mongodb:6.0.1:::::::* cpe:2.3:a:mongodb:mongodb:6.0.2:::::::* cpe:2.3:a:mongodb:mongodb:6.0.3:::::::* cpe:2.3:a:mongodb:mongodb:6.0.4:::::::* cpe:2.3:a:mongodb:mongodb:6.0.5:::::::* cpe:2.3:a:mongodb:mongodb:6.0.6:::::::* cpe:2.3:a:mongodb:mongodb:6.0.7:::::::* cpe:2.3:a:mongodb:mongodb:6.0.8:::::::* cpe:2.3:a:mongodb:mongodb:6.0.9:::::::* cpe:2.3:a:mongodb:mongodb:6.0.10:::::::* cpe:2.3:a:mongodb:mongodb:6.0.11:::::::* cpe:2.3:a:mongodb:mongodb:6.0.12:::::::* cpe:2.3:a:mongodb:mongodb:6.0.13:::::::* cpe:2.3:a:mongodb:mongodb:6.0.14:::::::* cpe:2.3:a:mongodb:mongodb:6.0.15:::::::* cpe:2.3:a:mongodb:mongodb:7.0.0:::::::* cpe:2.3:a:mongodb:mongodb:7.0.1:::::::* cpe:2.3:a:mongodb:mongodb:7.0.2:::::::* cpe:2.3:a:mongodb:mongodb:7.0.3:::::::* cpe:2.3:a:mongodb:mongodb:7.0.4:::::::* cpe:2.3:a:mongodb:mongodb:7.0.5:::::::* cpe:2.3:a:mongodb:mongodb:7.0.6:::::::* cpe:2.3:a:mongodb:mongodb:7.0.7:::::::* cpe:2.3:a:mongodb:mongodb:7.0.8:::::::* cpe:2.3:a:mongodb:mongodb:7.0.9:::::::* cpe:2.3:a:mongodb:mongodb:7.0.10:::::::* cpe:2.3:a:mongodb:mongodb:7.0.11:::::::* cpe:2.3:a:mongodb:mongodb:7.3.0:::::::* cpe:2.3:a:mongodb:mongodb:7.3.1:::::::* cpe:2.3:a:mongodb:mongodb:7.3.2:::::::* cpe:2.3:a:mongodb:c_driver:0.1:::::mongodb:: cpe:2.3:a:mongodb:c_driver:0.2:::::mongodb:: cpe:2.3:a:mongodb:c_driver:0.3:::::mongodb:: cpe:2.3:a:mongodb:c_driver:0.3.1:::::mongodb:: cpe:2.3:a:mongodb:c_driver:0.4:::::mongodb:: cpe:2.3:a:mongodb:c_driver:0.5:::::mongodb:: cpe:2.3:a:mongodb:c_driver:0.5.1:::::mongodb:: cpe:2.3:a:mongodb:c_driver:0.5.2:::::mongodb:: cpe:2.3:a:mongodb:c_driver:0.6:::::mongodb:: cpe:2.3:a:mongodb:c_driver:0.7:::::mongodb:: cpe:2.3:a:mongodb:c_driver:0.7.1:::::mongodb:: cpe:2.3:a:mongodb:c_driver:0.8:::::mongodb:: cpe:2.3:a:mongodb:c_driver:0.8.1:::::mongodb:: cpe:2.3:a:mongodb:c_driver:0.90.0:::::mongodb:: cpe:2.3:a:mongodb:c_driver:0.92.0:::::mongodb:: cpe:2.3:a:mongodb:c_driver:0.92.2:::::mongodb:: cpe:2.3:a:mongodb:c_driver:0.94.0:::::mongodb:: cpe:2.3:a:mongodb:c_driver:0.94.2:::::mongodb:: cpe:2.3:a:mongodb:c_driver:0.96.0:::::mongodb:: cpe:2.3:a:mongodb:c_driver:0.96.2:::::mongodb:: cpe:2.3:a:mongodb:c_driver:0.96.4:::::mongodb:: cpe:2.3:a:mongodb:c_driver:0.98.0:::::mongodb:: cpe:2.3:a:mongodb:c_driver:0.98.2:::::mongodb:: cpe:2.3:a:mongodb:c_driver:1.0.0:::::mongodb:: cpe:2.3:a:mongodb:c_driver:1.0.2:::::mongodb:: cpe:2.3:a:mongodb:c_driver:1.1.0:-::::mongodb::* cpe:2.3:a:mongodb:c_driver:1.1.0:rc0::::mongodb::* cpe:2.3:a:mongodb:c_driver:1.1.2:::::mongodb:: cpe:2.3:a:mongodb:c_driver:1.1.4:::::mongodb:: cpe:2.3:a:mongodb:c_driver:1.1.5:::::mongodb:: cpe:2.3:a:mongodb:c_driver:1.1.6:::::mongodb:: cpe:2.3:a:mongodb:c_driver:1.1.7:::::mongodb:: cpe:2.3:a:mongodb:c_driver:1.1.8:::::mongodb:: cpe:2.3:a:mongodb:c_driver:1.1.9:::::mongodb:: cpe:2.3:a:mongodb:c_driver:1.1.10:::::mongodb:: cpe:2.3:a:mongodb:c_driver:1.1.11:::::mongodb:: cpe:2.3:a:mongodb:c_driver:1.2.0:-::::mongodb::* cpe:2.3:a:mongodb:c_driver:1.2.0:beta::::mongodb::* cpe:2.3:a:mongodb:c_driver:1.2.0:beta1::::mongodb::* cpe:2.3:a:mongodb:c_driver:1.2.0:rc0::::mongodb::* cpe:2.3:a:mongodb:c_driver:1.2.1:::::mongodb:: cpe:2.3:a:mongodb:c_driver:1.2.2:::::mongodb:: cpe:2.3:a:mongodb:c_driver:1.2.3:::::mongodb:: cpe:2.3:a:mongodb:c_driver:1.2.4:::::mongodb:: cpe:2.3:a:mongodb:c_driver:1.3.0:-::::mongodb::* cpe:2.3:a:mongodb:c_driver:1.3.0:beta0::::mongodb::* cpe:2.3:a:mongodb:c_driver:1.3.0:rc0::::mongodb::* cpe:2.3:a:mongodb:c_driver:1.3.1:::::mongodb:: cpe:2.3:a:mongodb:c_driver:1.3.2:::::mongodb:: cpe:2.3:a:mongodb:c_driver:1.3.3:::::mongodb:: cpe:2.3:a:mongodb:c_driver:1.3.4:::::mongodb:: cpe:2.3:a:mongodb:c_driver:1.3.5:::::mongodb:: cpe:2.3:a:mongodb:c_driver:1.3.6:::::mongodb:: cpe:2.3:a:mongodb:c_driver:1.4.0:-::::mongodb::* cpe:2.3:a:mongodb:c_driver:1.4.0:beta0::::mongodb::* cpe:2.3:a:mongodb:c_driver:1.4.0:beta1::::mongodb::* cpe:2.3:a:mongodb:c_driver:1.4.1:::::mongodb:: cpe:2.3:a:mongodb:c_driver:1.4.2:::::mongodb:: cpe:2.3:a:mongodb:c_driver:1.4.3:::::mongodb:: cpe:2.3:a:mongodb:c_driver:1.5.0:-::::mongodb::* cpe:2.3:a:mongodb:c_driver:1.5.0:rc0::::mongodb::* cpe:2.3:a:mongodb:c_driver:1.5.0:rc1::::mongodb::* cpe:2.3:a:mongodb:c_driver:1.5.0:rc2::::mongodb::* cpe:2.3:a:mongodb:c_driver:1.5.0:rc3::::mongodb::* cpe:2.3:a:mongodb:c_driver:1.5.0:rc4::::mongodb::* cpe:2.3:a:mongodb:c_driver:1.5.0:rc6::::mongodb::* cpe:2.3:a:mongodb:c_driver:1.5.1:::::mongodb:: cpe:2.3:a:mongodb:c_driver:1.5.2:::::mongodb:: cpe:2.3:a:mongodb:c_driver:1.5.3:::::mongodb:: cpe:2.3:a:mongodb:c_driver:1.5.4:::::mongodb:: cpe:2.3:a:mongodb:c_driver:1.5.5:::::mongodb:: cpe:2.3:a:mongodb:c_driver:1.6.0:-::::mongodb::* cpe:2.3:a:mongodb:c_driver:1.6.0:rc0::::mongodb::* cpe:2.3:a:mongodb:c_driver:1.6.1:::::mongodb:: cpe:2.3:a:mongodb:c_driver:1.6.2:::::mongodb:: cpe:2.3:a:mongodb:c_driver:1.6.3:::::mongodb:: cpe:2.3:a:mongodb:c_driver:1.7.0:-::::mongodb::* cpe:2.3:a:mongodb:c_driver:1.7.0:rc0::::mongodb::* cpe:2.3:a:mongodb:c_driver:1.7.0:rc1::::mongodb::* cpe:2.3:a:mongodb:c_driver:1.7.0:rc2::::mongodb::* cpe:2.3:a:mongodb:c_driver:1.8.0:-::::mongodb::* cpe:2.3:a:mongodb:c_driver:1.8.0:rc0::::mongodb::* cpe:2.3:a:mongodb:c_driver:1.8.0:rc1::::mongodb::* cpe:2.3:a:mongodb:c_driver:1.8.1:::::mongodb:: cpe:2.3:a:mongodb:c_driver:1.8.2:::::mongodb:: cpe:2.3:a:mongodb:c_driver:1.9.0:-::::mongodb::* cpe:2.3:a:mongodb:c_driver:1.9.0:rc0::::mongodb::* cpe:2.3:a:mongodb:c_driver:1.9.0:rc1::::mongodb::* cpe:2.3:a:mongodb:c_driver:1.9.1:::::mongodb:: cpe:2.3:a:mongodb:c_driver:1.9.2:::::mongodb:: cpe:2.3:a:mongodb:c_driver:1.9.3:::::mongodb:: cpe:2.3:a:mongodb:c_driver:1.9.4:::::mongodb:: cpe:2.3:a:mongodb:c_driver:1.9.5:::::mongodb:: cpe:2.3:a:mongodb:c_driver:1.10.0:::::mongodb:: cpe:2.3:a:mongodb:c_driver:1.10.1:::::mongodb:: cpe:2.3:a:mongodb:c_driver:1.10.2:::::mongodb:: cpe:2.3:a:mongodb:c_driver:1.10.3:::::mongodb:: cpe:2.3:a:mongodb:c_driver:1.11.0:::::mongodb:: cpe:2.3:a:mongodb:c_driver:1.12.0:::::mongodb:: cpe:2.3:a:mongodb:c_driver:1.13.0:::::mongodb:: cpe:2.3:a:mongodb:c_driver:1.13.1:::::mongodb:: cpe:2.3:a:mongodb:c_driver:1.14.0:::::mongodb:: cpe:2.3:a:mongodb:c_driver:1.14.1:::::mongodb:: cpe:2.3:a:mongodb:c_driver:1.15.0:::::mongodb:: cpe:2.3:a:mongodb:c_driver:1.15.1:::::mongodb:: cpe:2.3:a:mongodb:c_driver:1.15.2:::::mongodb:: cpe:2.3:a:mongodb:c_driver:1.15.3:::::mongodb:: cpe:2.3:a:mongodb:c_driver:1.16.0:::::mongodb:: cpe:2.3:a:mongodb:c_driver:1.16.1:::::mongodb:: cpe:2.3:a:mongodb:c_driver:1.16.2:::::mongodb:: cpe:2.3:a:mongodb:c_driver:1.17.0:-::::mongodb::* cpe:2.3:a:mongodb:c_driver:1.17.0:beta::::mongodb::* cpe:2.3:a:mongodb:c_driver:1.17.0:beta2::::mongodb::* cpe:2.3:a:mongodb:c_driver:1.17.0:rc0::::mongodb::* cpe:2.3:a:mongodb:c_driver:1.17.1:::::mongodb:: cpe:2.3:a:mongodb:c_driver:1.17.2:::::mongodb:: cpe:2.3:a:mongodb:c_driver:1.17.3:::::mongodb:: cpe:2.3:a:mongodb:c_driver:1.17.4:::::mongodb:: cpe:2.3:a:mongodb:c_driver:1.17.5:::::mongodb:: cpe:2.3:a:mongodb:c_driver:1.17.6:::::mongodb:: cpe:2.3:a:mongodb:c_driver:1.17.7:::::mongodb:: cpe:2.3:a:mongodb:c_driver:1.18.0:alpha::::mongodb::* cpe:2.3:a:mongodb:c_driver:1.18.0:alpha2::::mongodb::* cpe:2.3:a:mongodb:c_driver:1.18.0:::::mongodb:: cpe:2.3:a:mongodb:c_driver:1.19.0:::::mongodb:: cpe:2.3:a:mongodb:c_driver:1.19.1:::::mongodb:: cpe:2.3:a:mongodb:c_driver:1.19.2:::::mongodb:: cpe:2.3:a:mongodb:c_driver:1.20.0:::::mongodb:: cpe:2.3:a:mongodb:c_driver:1.20.1:::::mongodb:: cpe:2.3:a:mongodb:c_driver:1.21.0:::::mongodb:: cpe:2.3:a:mongodb:c_driver:1.21.0:beta0::::mongodb::* cpe:2.3:a:mongodb:c_driver:1.21.1:::::mongodb:: cpe:2.3:a:mongodb:c_driver:1.21.2:::::mongodb:: cpe:2.3:a:mongodb:c_driver:1.22.0:::::mongodb:: cpe:2.3:a:mongodb:c_driver:1.22.1:::::mongodb:: cpe:2.3:a:mongodb:c_driver:1.22.2:::::mongodb:: cpe:2.3:a:mongodb:c_driver:1.23.0:::::mongodb:: cpe:2.3:a:mongodb:c_driver:1.23.1:::::mongodb:: cpe:2.3:a:mongodb:c_driver:1.23.2:::::mongodb:: cpe:2.3:a:mongodb:c_driver:1.23.3:::::mongodb:: cpe:2.3:a:mongodb:c_driver:1.23.4:::::mongodb:: cpe:2.3:a:mongodb:c_driver:1.23.5:::::mongodb:: cpe:2.3:a:mongodb:c_driver:1.24.0:::::mongodb:: cpe:2.3:a:mongodb:c_driver:1.24.1:::::mongodb:: cpe:2.3:a:mongodb:c_driver:1.24.2:::::mongodb:: cpe:2.3:a:mongodb:c_driver:1.24.3:::::mongodb:: cpe:2.3:a:mongodb:c_driver:1.24.4:::::mongodb:: cpe:2.3:a:mongodb:c_driver:1.25.0:::::mongodb:: cpe:2.3:a:mongodb:c_driver:1.25.1:::::mongodb:: cpe:2.3:a:mongodb:c_driver:1.25.2:::::mongodb:: cpe:2.3:a:mongodb:c_driver:1.25.3:::::mongodb:: cpe:2.3:a:mongodb:c_driver:1.25.4:::::mongodb:: cpe:2.3:a:mongodb:c_driver:1.26.0:::::mongodb:: cpe:2.3:a:mongodb:c_driver:1.26.1:::::mongodb:: cpe:2.3:a:mongodb:php_driver:0.1.0:::::mongodb:: cpe:2.3:a:mongodb:php_driver:0.1.1:::::mongodb:: cpe:2.3:a:mongodb:php_driver:0.1.2:::::mongodb:: cpe:2.3:a:mongodb:php_driver:0.1.3:::::mongodb:: cpe:2.3:a:mongodb:php_driver:0.1.4:::::mongodb:: cpe:2.3:a:mongodb:php_driver:0.1.5:::::mongodb:: cpe:2.3:a:mongodb:php_driver:0.2.0:::::mongodb:: cpe:2.3:a:mongodb:php_driver:0.3.0:::::mongodb:: cpe:2.3:a:mongodb:php_driver:0.3.1:::::mongodb:: cpe:2.3:a:mongodb:php_driver:0.4.0:::::mongodb:: cpe:2.3:a:mongodb:php_driver:0.4.1:::::mongodb:: cpe:2.3:a:mongodb:php_driver:0.5.0:::::mongodb:: cpe:2.3:a:mongodb:php_driver:0.5.1:::::mongodb:: cpe:2.3:a:mongodb:php_driver:0.6.0:::::mongodb:: cpe:2.3:a:mongodb:php_driver:0.6.1:::::mongodb:: cpe:2.3:a:mongodb:php_driver:0.6.2:::::mongodb:: cpe:2.3:a:mongodb:php_driver:0.6.3:::::mongodb:: cpe:2.3:a:mongodb:php_driver:1.0.0:-::::mongodb::* cpe:2.3:a:mongodb:php_driver:1.0.0:alpha1::::mongodb::* cpe:2.3:a:mongodb:php_driver:1.0.0:alpha2::::mongodb::* cpe:2.3:a:mongodb:php_driver:1.0.0:beta1::::mongodb::* cpe:2.3:a:mongodb:php_driver:1.0.0:beta2::::mongodb::* cpe:2.3:a:mongodb:php_driver:1.0.0:rc0::::mongodb::* cpe:2.3:a:mongodb:php_driver:1.0.1:::::mongodb:: cpe:2.3:a:mongodb:php_driver:1.1.0:::::mongodb:: cpe:2.3:a:mongodb:php_driver:1.1.1:::::mongodb:: cpe:2.3:a:mongodb:php_driver:1.1.2:::::mongodb:: cpe:2.3:a:mongodb:php_driver:1.1.3:::::mongodb:: cpe:2.3:a:mongodb:php_driver:1.1.4:::::mongodb:: cpe:2.3:a:mongodb:php_driver:1.1.5:::::mongodb:: cpe:2.3:a:mongodb:php_driver:1.1.6:::::mongodb:: cpe:2.3:a:mongodb:php_driver:1.1.7:::::mongodb:: cpe:2.3:a:mongodb:php_driver:1.1.8:::::mongodb:: cpe:2.3:a:mongodb:php_driver:1.1.9:::::mongodb:: cpe:2.3:a:mongodb:php_driver:1.1.10:::::mongodb:: cpe:2.3:a:mongodb:php_driver:1.2.0:-::::mongodb::* cpe:2.3:a:mongodb:php_driver:1.2.0:alpha1::::mongodb::* cpe:2.3:a:mongodb:php_driver:1.2.0:alpha2::::mongodb::* cpe:2.3:a:mongodb:php_driver:1.2.0:alpha3::::mongodb::* cpe:2.3:a:mongodb:php_driver:1.2.1:::::mongodb:: cpe:2.3:a:mongodb:php_driver:1.2.2:::::mongodb:: cpe:2.3:a:mongodb:php_driver:1.2.3:::::mongodb:: cpe:2.3:a:mongodb:php_driver:1.2.4:::::mongodb:: cpe:2.3:a:mongodb:php_driver:1.2.5:::::mongodb:: cpe:2.3:a:mongodb:php_driver:1.2.6:::::mongodb:: cpe:2.3:a:mongodb:php_driver:1.2.7:::::mongodb:: cpe:2.3:a:mongodb:php_driver:1.2.8:::::mongodb:: cpe:2.3:a:mongodb:php_driver:1.2.9:::::mongodb:: cpe:2.3:a:mongodb:php_driver:1.2.10:::::mongodb:: cpe:2.3:a:mongodb:php_driver:1.2.11:::::mongodb:: cpe:2.3:a:mongodb:php_driver:1.3.0:-::::mongodb::* cpe:2.3:a:mongodb:php_driver:1.3.0:beta1::::mongodb::* cpe:2.3:a:mongodb:php_driver:1.3.0:beta2::::mongodb::* cpe:2.3:a:mongodb:php_driver:1.3.0:rc1::::mongodb::* cpe:2.3:a:mongodb:php_driver:1.3.1:::::mongodb:: cpe:2.3:a:mongodb:php_driver:1.3.2:::::mongodb:: cpe:2.3:a:mongodb:php_driver:1.3.3:::::mongodb:: cpe:2.3:a:mongodb:php_driver:1.3.4:::::mongodb:: cpe:2.3:a:mongodb:php_driver:1.4.0:-::::mongodb::* cpe:2.3:a:mongodb:php_driver:1.4.0:beta1::::mongodb::* cpe:2.3:a:mongodb:php_driver:1.4.0:rc1::::mongodb::* cpe:2.3:a:mongodb:php_driver:1.4.0:rc2::::mongodb::* cpe:2.3:a:mongodb:php_driver:1.4.1:::::mongodb:: cpe:2.3:a:mongodb:php_driver:1.4.2:::::mongodb:: cpe:2.3:a:mongodb:php_driver:1.4.3:::::mongodb:: cpe:2.3:a:mongodb:php_driver:1.4.4:::::mongodb:: cpe:2.3:a:mongodb:php_driver:1.5.0:::::mongodb:: cpe:2.3:a:mongodb:php_driver:1.5.1:::::mongodb:: cpe:2.3:a:mongodb:php_driver:1.5.2:::::mongodb:: cpe:2.3:a:mongodb:php_driver:1.5.3:::::mongodb:: cpe:2.3:a:mongodb:php_driver:1.5.4:::::mongodb:: cpe:2.3:a:mongodb:php_driver:1.5.5:::::mongodb:: cpe:2.3:a:mongodb:php_driver:1.6.0:-::::mongodb::* cpe:2.3:a:mongodb:php_driver:1.6.0:alpha1::::mongodb::* cpe:2.3:a:mongodb:php_driver:1.6.0:alpha2::::mongodb::* cpe:2.3:a:mongodb:php_driver:1.6.0:alpha3::::mongodb::* cpe:2.3:a:mongodb:php_driver:1.6.0:rc1::::mongodb::* cpe:2.3:a:mongodb:php_driver:1.6.1:::::mongodb:: cpe:2.3:a:mongodb:php_driver:1.7.0:::::mongodb:: cpe:2.3:a:mongodb:php_driver:1.7.1:::::mongodb:: cpe:2.3:a:mongodb:php_driver:1.7.2:::::mongodb:: cpe:2.3:a:mongodb:php_driver:1.7.3:::::mongodb:: cpe:2.3:a:mongodb:php_driver:1.7.4:::::mongodb:: cpe:2.3:a:mongodb:php_driver:1.7.5:::::mongodb:: cpe:2.3:a:mongodb:php_driver:1.8.0:-::::mongodb::* cpe:2.3:a:mongodb:php_driver:1.8.0:beta1::::mongodb::* cpe:2.3:a:mongodb:php_driver:1.8.0:beta2::::mongodb::* cpe:2.3:a:mongodb:php_driver:1.8.0:rc1::::mongodb::* cpe:2.3:a:mongodb:php_driver:1.8.1:::::mongodb:: cpe:2.3:a:mongodb:php_driver:1.8.2:::::mongodb:: cpe:2.3:a:mongodb:php_driver:1.9.0:-::::mongodb::* cpe:2.3:a:mongodb:php_driver:1.9.0:rc1::::mongodb::* cpe:2.3:a:mongodb:php_driver:1.9.1:::::mongodb:: cpe:2.3:a:mongodb:php_driver:1.9.2:::::mongodb:: cpe:2.3:a:mongodb:php_driver:1.10.0:alpha1::::mongodb::* cpe:2.3:a:mongodb:php_driver:1.10.0:::::mongodb:: cpe:2.3:a:mongodb:php_driver:1.11.0:alpha1::::mongodb::* cpe:2.3:a:mongodb:php_driver:1.11.0:::::mongodb:: cpe:2.3:a:mongodb:php_driver:1.11.1:::::mongodb:: cpe:2.3:a:mongodb:php_driver:1.12.0:::::mongodb:: cpe:2.3:a:mongodb:php_driver:1.12.1:::::mongodb:: cpe:2.3:a:mongodb:php_driver:1.13.0:::::mongodb:: cpe:2.3:a:mongodb:php_driver:1.14.0:beta1::::mongodb::* cpe:2.3:a:mongodb:php_driver:1.14.0:::::mongodb:: cpe:2.3:a:mongodb:php_driver:1.14.1:::::mongodb:: cpe:2.3:a:mongodb:php_driver:1.14.2:::::mongodb:: cpe:2.3:a:mongodb:php_driver:1.15.0:::::mongodb:: cpe:2.3:a:mongodb:php_driver:1.15.1:::::mongodb:: cpe:2.3:a:mongodb:php_driver:1.15.2:::::mongodb:: cpe:2.3:a:mongodb:php_driver:1.15.3:::::mongodb:: cpe:2.3:a:mongodb:php_driver:1.16.0:::::mongodb:: cpe:2.3:a:mongodb:php_driver:1.16.1:::::mongodb:: cpe:2.3:a:mongodb:php_driver:1.16.2:::::mongodb:: cpe:2.3:a:mongodb:php_driver:1.17.0:::::mongodb:: cpe:2.3:a:mongodb:php_driver:1.17.1:::::mongodb:: cpe:2.3:a:mongodb:php_driver:1.17.2:::::mongodb:: cpe:2.3:a:mongodb:php_driver:1.17.3:::::mongodb:: cpe:2.3:a:mongodb:php_driver:1.18.0:::::mongodb::
MongoDB Inc	MongoDB C Driver	Affected: 0 , < 1.26.2 (custom)
MongoDB Inc	MongoDB PHP Driver	Affected: 0 , < 1.18.1 (custom)

Date Public

2024-08-07 09:55

Credits

T. Doğa Gelişli

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2024-7553",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "total"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2024-08-07T15:27:26.847490Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2024-08-07T15:27:46.258Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "cpes": [
            "cpe:2.3:a:mongodb:mongodb:5.0.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:mongodb:mongodb:5.0.1:*:*:*:*:*:*:*",
            "cpe:2.3:a:mongodb:mongodb:5.0.2:*:*:*:*:*:*:*",
            "cpe:2.3:a:mongodb:mongodb:5.0.3:*:*:*:*:*:*:*",
            "cpe:2.3:a:mongodb:mongodb:5.0.4:*:*:*:*:*:*:*",
            "cpe:2.3:a:mongodb:mongodb:5.0.5:*:*:*:*:*:*:*",
            "cpe:2.3:a:mongodb:mongodb:5.0.6:*:*:*:*:*:*:*",
            "cpe:2.3:a:mongodb:mongodb:5.0.7:*:*:*:*:*:*:*",
            "cpe:2.3:a:mongodb:mongodb:5.0.8:*:*:*:*:*:*:*",
            "cpe:2.3:a:mongodb:mongodb:5.0.9:*:*:*:*:*:*:*",
            "cpe:2.3:a:mongodb:mongodb:5.0.10:*:*:*:*:*:*:*",
            "cpe:2.3:a:mongodb:mongodb:5.0.11:*:*:*:*:*:*:*",
            "cpe:2.3:a:mongodb:mongodb:5.0.12:*:*:*:*:*:*:*",
            "cpe:2.3:a:mongodb:mongodb:5.0.13:*:*:*:*:*:*:*",
            "cpe:2.3:a:mongodb:mongodb:5.0.14:*:*:*:*:*:*:*",
            "cpe:2.3:a:mongodb:mongodb:5.0.15:*:*:*:*:*:*:*",
            "cpe:2.3:a:mongodb:mongodb:5.0.16:*:*:*:*:*:*:*",
            "cpe:2.3:a:mongodb:mongodb:5.0.17:*:*:*:*:*:*:*",
            "cpe:2.3:a:mongodb:mongodb:5.0.18:*:*:*:*:*:*:*",
            "cpe:2.3:a:mongodb:mongodb:5.0.19:*:*:*:*:*:*:*",
            "cpe:2.3:a:mongodb:mongodb:5.0.20:*:*:*:*:*:*:*",
            "cpe:2.3:a:mongodb:mongodb:5.0.21:*:*:*:*:*:*:*",
            "cpe:2.3:a:mongodb:mongodb:5.0.22:*:*:*:*:*:*:*",
            "cpe:2.3:a:mongodb:mongodb:5.0.23:*:*:*:*:*:*:*",
            "cpe:2.3:a:mongodb:mongodb:5.0.24:*:*:*:*:*:*:*",
            "cpe:2.3:a:mongodb:mongodb:5.0.25:*:*:*:*:*:*:*",
            "cpe:2.3:a:mongodb:mongodb:5.0.26:*:*:*:*:*:*:*",
            "cpe:2.3:a:mongodb:mongodb:6.0.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:mongodb:mongodb:6.0.1:*:*:*:*:*:*:*",
            "cpe:2.3:a:mongodb:mongodb:6.0.2:*:*:*:*:*:*:*",
            "cpe:2.3:a:mongodb:mongodb:6.0.3:*:*:*:*:*:*:*",
            "cpe:2.3:a:mongodb:mongodb:6.0.4:*:*:*:*:*:*:*",
            "cpe:2.3:a:mongodb:mongodb:6.0.5:*:*:*:*:*:*:*",
            "cpe:2.3:a:mongodb:mongodb:6.0.6:*:*:*:*:*:*:*",
            "cpe:2.3:a:mongodb:mongodb:6.0.7:*:*:*:*:*:*:*",
            "cpe:2.3:a:mongodb:mongodb:6.0.8:*:*:*:*:*:*:*",
            "cpe:2.3:a:mongodb:mongodb:6.0.9:*:*:*:*:*:*:*",
            "cpe:2.3:a:mongodb:mongodb:6.0.10:*:*:*:*:*:*:*",
            "cpe:2.3:a:mongodb:mongodb:6.0.11:*:*:*:*:*:*:*",
            "cpe:2.3:a:mongodb:mongodb:6.0.12:*:*:*:*:*:*:*",
            "cpe:2.3:a:mongodb:mongodb:6.0.13:*:*:*:*:*:*:*",
            "cpe:2.3:a:mongodb:mongodb:6.0.14:*:*:*:*:*:*:*",
            "cpe:2.3:a:mongodb:mongodb:6.0.15:*:*:*:*:*:*:*",
            "cpe:2.3:a:mongodb:mongodb:7.0.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:mongodb:mongodb:7.0.1:*:*:*:*:*:*:*",
            "cpe:2.3:a:mongodb:mongodb:7.0.2:*:*:*:*:*:*:*",
            "cpe:2.3:a:mongodb:mongodb:7.0.3:*:*:*:*:*:*:*",
            "cpe:2.3:a:mongodb:mongodb:7.0.4:*:*:*:*:*:*:*",
            "cpe:2.3:a:mongodb:mongodb:7.0.5:*:*:*:*:*:*:*",
            "cpe:2.3:a:mongodb:mongodb:7.0.6:*:*:*:*:*:*:*",
            "cpe:2.3:a:mongodb:mongodb:7.0.7:*:*:*:*:*:*:*",
            "cpe:2.3:a:mongodb:mongodb:7.0.8:*:*:*:*:*:*:*",
            "cpe:2.3:a:mongodb:mongodb:7.0.9:*:*:*:*:*:*:*",
            "cpe:2.3:a:mongodb:mongodb:7.0.10:*:*:*:*:*:*:*",
            "cpe:2.3:a:mongodb:mongodb:7.0.11:*:*:*:*:*:*:*",
            "cpe:2.3:a:mongodb:mongodb:7.3.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:mongodb:mongodb:7.3.1:*:*:*:*:*:*:*",
            "cpe:2.3:a:mongodb:mongodb:7.3.2:*:*:*:*:*:*:*",
            "cpe:2.3:a:mongodb:c_driver:0.1:*:*:*:*:mongodb:*:*",
            "cpe:2.3:a:mongodb:c_driver:0.2:*:*:*:*:mongodb:*:*",
            "cpe:2.3:a:mongodb:c_driver:0.3:*:*:*:*:mongodb:*:*",
            "cpe:2.3:a:mongodb:c_driver:0.3.1:*:*:*:*:mongodb:*:*",
            "cpe:2.3:a:mongodb:c_driver:0.4:*:*:*:*:mongodb:*:*",
            "cpe:2.3:a:mongodb:c_driver:0.5:*:*:*:*:mongodb:*:*",
            "cpe:2.3:a:mongodb:c_driver:0.5.1:*:*:*:*:mongodb:*:*",
            "cpe:2.3:a:mongodb:c_driver:0.5.2:*:*:*:*:mongodb:*:*",
            "cpe:2.3:a:mongodb:c_driver:0.6:*:*:*:*:mongodb:*:*",
            "cpe:2.3:a:mongodb:c_driver:0.7:*:*:*:*:mongodb:*:*",
            "cpe:2.3:a:mongodb:c_driver:0.7.1:*:*:*:*:mongodb:*:*",
            "cpe:2.3:a:mongodb:c_driver:0.8:*:*:*:*:mongodb:*:*",
            "cpe:2.3:a:mongodb:c_driver:0.8.1:*:*:*:*:mongodb:*:*",
            "cpe:2.3:a:mongodb:c_driver:0.90.0:*:*:*:*:mongodb:*:*",
            "cpe:2.3:a:mongodb:c_driver:0.92.0:*:*:*:*:mongodb:*:*",
            "cpe:2.3:a:mongodb:c_driver:0.92.2:*:*:*:*:mongodb:*:*",
            "cpe:2.3:a:mongodb:c_driver:0.94.0:*:*:*:*:mongodb:*:*",
            "cpe:2.3:a:mongodb:c_driver:0.94.2:*:*:*:*:mongodb:*:*",
            "cpe:2.3:a:mongodb:c_driver:0.96.0:*:*:*:*:mongodb:*:*",
            "cpe:2.3:a:mongodb:c_driver:0.96.2:*:*:*:*:mongodb:*:*",
            "cpe:2.3:a:mongodb:c_driver:0.96.4:*:*:*:*:mongodb:*:*",
            "cpe:2.3:a:mongodb:c_driver:0.98.0:*:*:*:*:mongodb:*:*",
            "cpe:2.3:a:mongodb:c_driver:0.98.2:*:*:*:*:mongodb:*:*",
            "cpe:2.3:a:mongodb:c_driver:1.0.0:*:*:*:*:mongodb:*:*",
            "cpe:2.3:a:mongodb:c_driver:1.0.2:*:*:*:*:mongodb:*:*",
            "cpe:2.3:a:mongodb:c_driver:1.1.0:-:*:*:*:mongodb:*:*",
            "cpe:2.3:a:mongodb:c_driver:1.1.0:rc0:*:*:*:mongodb:*:*",
            "cpe:2.3:a:mongodb:c_driver:1.1.2:*:*:*:*:mongodb:*:*",
            "cpe:2.3:a:mongodb:c_driver:1.1.4:*:*:*:*:mongodb:*:*",
            "cpe:2.3:a:mongodb:c_driver:1.1.5:*:*:*:*:mongodb:*:*",
            "cpe:2.3:a:mongodb:c_driver:1.1.6:*:*:*:*:mongodb:*:*",
            "cpe:2.3:a:mongodb:c_driver:1.1.7:*:*:*:*:mongodb:*:*",
            "cpe:2.3:a:mongodb:c_driver:1.1.8:*:*:*:*:mongodb:*:*",
            "cpe:2.3:a:mongodb:c_driver:1.1.9:*:*:*:*:mongodb:*:*",
            "cpe:2.3:a:mongodb:c_driver:1.1.10:*:*:*:*:mongodb:*:*",
            "cpe:2.3:a:mongodb:c_driver:1.1.11:*:*:*:*:mongodb:*:*",
            "cpe:2.3:a:mongodb:c_driver:1.2.0:-:*:*:*:mongodb:*:*",
            "cpe:2.3:a:mongodb:c_driver:1.2.0:beta:*:*:*:mongodb:*:*",
            "cpe:2.3:a:mongodb:c_driver:1.2.0:beta1:*:*:*:mongodb:*:*",
            "cpe:2.3:a:mongodb:c_driver:1.2.0:rc0:*:*:*:mongodb:*:*",
            "cpe:2.3:a:mongodb:c_driver:1.2.1:*:*:*:*:mongodb:*:*",
            "cpe:2.3:a:mongodb:c_driver:1.2.2:*:*:*:*:mongodb:*:*",
            "cpe:2.3:a:mongodb:c_driver:1.2.3:*:*:*:*:mongodb:*:*",
            "cpe:2.3:a:mongodb:c_driver:1.2.4:*:*:*:*:mongodb:*:*",
            "cpe:2.3:a:mongodb:c_driver:1.3.0:-:*:*:*:mongodb:*:*",
            "cpe:2.3:a:mongodb:c_driver:1.3.0:beta0:*:*:*:mongodb:*:*",
            "cpe:2.3:a:mongodb:c_driver:1.3.0:rc0:*:*:*:mongodb:*:*",
            "cpe:2.3:a:mongodb:c_driver:1.3.1:*:*:*:*:mongodb:*:*",
            "cpe:2.3:a:mongodb:c_driver:1.3.2:*:*:*:*:mongodb:*:*",
            "cpe:2.3:a:mongodb:c_driver:1.3.3:*:*:*:*:mongodb:*:*",
            "cpe:2.3:a:mongodb:c_driver:1.3.4:*:*:*:*:mongodb:*:*",
            "cpe:2.3:a:mongodb:c_driver:1.3.5:*:*:*:*:mongodb:*:*",
            "cpe:2.3:a:mongodb:c_driver:1.3.6:*:*:*:*:mongodb:*:*",
            "cpe:2.3:a:mongodb:c_driver:1.4.0:-:*:*:*:mongodb:*:*",
            "cpe:2.3:a:mongodb:c_driver:1.4.0:beta0:*:*:*:mongodb:*:*",
            "cpe:2.3:a:mongodb:c_driver:1.4.0:beta1:*:*:*:mongodb:*:*",
            "cpe:2.3:a:mongodb:c_driver:1.4.1:*:*:*:*:mongodb:*:*",
            "cpe:2.3:a:mongodb:c_driver:1.4.2:*:*:*:*:mongodb:*:*",
            "cpe:2.3:a:mongodb:c_driver:1.4.3:*:*:*:*:mongodb:*:*",
            "cpe:2.3:a:mongodb:c_driver:1.5.0:-:*:*:*:mongodb:*:*",
            "cpe:2.3:a:mongodb:c_driver:1.5.0:rc0:*:*:*:mongodb:*:*",
            "cpe:2.3:a:mongodb:c_driver:1.5.0:rc1:*:*:*:mongodb:*:*",
            "cpe:2.3:a:mongodb:c_driver:1.5.0:rc2:*:*:*:mongodb:*:*",
            "cpe:2.3:a:mongodb:c_driver:1.5.0:rc3:*:*:*:mongodb:*:*",
            "cpe:2.3:a:mongodb:c_driver:1.5.0:rc4:*:*:*:mongodb:*:*",
            "cpe:2.3:a:mongodb:c_driver:1.5.0:rc6:*:*:*:mongodb:*:*",
            "cpe:2.3:a:mongodb:c_driver:1.5.1:*:*:*:*:mongodb:*:*",
            "cpe:2.3:a:mongodb:c_driver:1.5.2:*:*:*:*:mongodb:*:*",
            "cpe:2.3:a:mongodb:c_driver:1.5.3:*:*:*:*:mongodb:*:*",
            "cpe:2.3:a:mongodb:c_driver:1.5.4:*:*:*:*:mongodb:*:*",
            "cpe:2.3:a:mongodb:c_driver:1.5.5:*:*:*:*:mongodb:*:*",
            "cpe:2.3:a:mongodb:c_driver:1.6.0:-:*:*:*:mongodb:*:*",
            "cpe:2.3:a:mongodb:c_driver:1.6.0:rc0:*:*:*:mongodb:*:*",
            "cpe:2.3:a:mongodb:c_driver:1.6.1:*:*:*:*:mongodb:*:*",
            "cpe:2.3:a:mongodb:c_driver:1.6.2:*:*:*:*:mongodb:*:*",
            "cpe:2.3:a:mongodb:c_driver:1.6.3:*:*:*:*:mongodb:*:*",
            "cpe:2.3:a:mongodb:c_driver:1.7.0:-:*:*:*:mongodb:*:*",
            "cpe:2.3:a:mongodb:c_driver:1.7.0:rc0:*:*:*:mongodb:*:*",
            "cpe:2.3:a:mongodb:c_driver:1.7.0:rc1:*:*:*:mongodb:*:*",
            "cpe:2.3:a:mongodb:c_driver:1.7.0:rc2:*:*:*:mongodb:*:*",
            "cpe:2.3:a:mongodb:c_driver:1.8.0:-:*:*:*:mongodb:*:*",
            "cpe:2.3:a:mongodb:c_driver:1.8.0:rc0:*:*:*:mongodb:*:*",
            "cpe:2.3:a:mongodb:c_driver:1.8.0:rc1:*:*:*:mongodb:*:*",
            "cpe:2.3:a:mongodb:c_driver:1.8.1:*:*:*:*:mongodb:*:*",
            "cpe:2.3:a:mongodb:c_driver:1.8.2:*:*:*:*:mongodb:*:*",
            "cpe:2.3:a:mongodb:c_driver:1.9.0:-:*:*:*:mongodb:*:*",
            "cpe:2.3:a:mongodb:c_driver:1.9.0:rc0:*:*:*:mongodb:*:*",
            "cpe:2.3:a:mongodb:c_driver:1.9.0:rc1:*:*:*:mongodb:*:*",
            "cpe:2.3:a:mongodb:c_driver:1.9.1:*:*:*:*:mongodb:*:*",
            "cpe:2.3:a:mongodb:c_driver:1.9.2:*:*:*:*:mongodb:*:*",
            "cpe:2.3:a:mongodb:c_driver:1.9.3:*:*:*:*:mongodb:*:*",
            "cpe:2.3:a:mongodb:c_driver:1.9.4:*:*:*:*:mongodb:*:*",
            "cpe:2.3:a:mongodb:c_driver:1.9.5:*:*:*:*:mongodb:*:*",
            "cpe:2.3:a:mongodb:c_driver:1.10.0:*:*:*:*:mongodb:*:*",
            "cpe:2.3:a:mongodb:c_driver:1.10.1:*:*:*:*:mongodb:*:*",
            "cpe:2.3:a:mongodb:c_driver:1.10.2:*:*:*:*:mongodb:*:*",
            "cpe:2.3:a:mongodb:c_driver:1.10.3:*:*:*:*:mongodb:*:*",
            "cpe:2.3:a:mongodb:c_driver:1.11.0:*:*:*:*:mongodb:*:*",
            "cpe:2.3:a:mongodb:c_driver:1.12.0:*:*:*:*:mongodb:*:*",
            "cpe:2.3:a:mongodb:c_driver:1.13.0:*:*:*:*:mongodb:*:*",
            "cpe:2.3:a:mongodb:c_driver:1.13.1:*:*:*:*:mongodb:*:*",
            "cpe:2.3:a:mongodb:c_driver:1.14.0:*:*:*:*:mongodb:*:*",
            "cpe:2.3:a:mongodb:c_driver:1.14.1:*:*:*:*:mongodb:*:*",
            "cpe:2.3:a:mongodb:c_driver:1.15.0:*:*:*:*:mongodb:*:*",
            "cpe:2.3:a:mongodb:c_driver:1.15.1:*:*:*:*:mongodb:*:*",
            "cpe:2.3:a:mongodb:c_driver:1.15.2:*:*:*:*:mongodb:*:*",
            "cpe:2.3:a:mongodb:c_driver:1.15.3:*:*:*:*:mongodb:*:*",
            "cpe:2.3:a:mongodb:c_driver:1.16.0:*:*:*:*:mongodb:*:*",
            "cpe:2.3:a:mongodb:c_driver:1.16.1:*:*:*:*:mongodb:*:*",
            "cpe:2.3:a:mongodb:c_driver:1.16.2:*:*:*:*:mongodb:*:*",
            "cpe:2.3:a:mongodb:c_driver:1.17.0:-:*:*:*:mongodb:*:*",
            "cpe:2.3:a:mongodb:c_driver:1.17.0:beta:*:*:*:mongodb:*:*",
            "cpe:2.3:a:mongodb:c_driver:1.17.0:beta2:*:*:*:mongodb:*:*",
            "cpe:2.3:a:mongodb:c_driver:1.17.0:rc0:*:*:*:mongodb:*:*",
            "cpe:2.3:a:mongodb:c_driver:1.17.1:*:*:*:*:mongodb:*:*",
            "cpe:2.3:a:mongodb:c_driver:1.17.2:*:*:*:*:mongodb:*:*",
            "cpe:2.3:a:mongodb:c_driver:1.17.3:*:*:*:*:mongodb:*:*",
            "cpe:2.3:a:mongodb:c_driver:1.17.4:*:*:*:*:mongodb:*:*",
            "cpe:2.3:a:mongodb:c_driver:1.17.5:*:*:*:*:mongodb:*:*",
            "cpe:2.3:a:mongodb:c_driver:1.17.6:*:*:*:*:mongodb:*:*",
            "cpe:2.3:a:mongodb:c_driver:1.17.7:*:*:*:*:mongodb:*:*",
            "cpe:2.3:a:mongodb:c_driver:1.18.0:alpha:*:*:*:mongodb:*:*",
            "cpe:2.3:a:mongodb:c_driver:1.18.0:alpha2:*:*:*:mongodb:*:*",
            "cpe:2.3:a:mongodb:c_driver:1.18.0:*:*:*:*:mongodb:*:*",
            "cpe:2.3:a:mongodb:c_driver:1.19.0:*:*:*:*:mongodb:*:*",
            "cpe:2.3:a:mongodb:c_driver:1.19.1:*:*:*:*:mongodb:*:*",
            "cpe:2.3:a:mongodb:c_driver:1.19.2:*:*:*:*:mongodb:*:*",
            "cpe:2.3:a:mongodb:c_driver:1.20.0:*:*:*:*:mongodb:*:*",
            "cpe:2.3:a:mongodb:c_driver:1.20.1:*:*:*:*:mongodb:*:*",
            "cpe:2.3:a:mongodb:c_driver:1.21.0:*:*:*:*:mongodb:*:*",
            "cpe:2.3:a:mongodb:c_driver:1.21.0:beta0:*:*:*:mongodb:*:*",
            "cpe:2.3:a:mongodb:c_driver:1.21.1:*:*:*:*:mongodb:*:*",
            "cpe:2.3:a:mongodb:c_driver:1.21.2:*:*:*:*:mongodb:*:*",
            "cpe:2.3:a:mongodb:c_driver:1.22.0:*:*:*:*:mongodb:*:*",
            "cpe:2.3:a:mongodb:c_driver:1.22.1:*:*:*:*:mongodb:*:*",
            "cpe:2.3:a:mongodb:c_driver:1.22.2:*:*:*:*:mongodb:*:*",
            "cpe:2.3:a:mongodb:c_driver:1.23.0:*:*:*:*:mongodb:*:*",
            "cpe:2.3:a:mongodb:c_driver:1.23.1:*:*:*:*:mongodb:*:*",
            "cpe:2.3:a:mongodb:c_driver:1.23.2:*:*:*:*:mongodb:*:*",
            "cpe:2.3:a:mongodb:c_driver:1.23.3:*:*:*:*:mongodb:*:*",
            "cpe:2.3:a:mongodb:c_driver:1.23.4:*:*:*:*:mongodb:*:*",
            "cpe:2.3:a:mongodb:c_driver:1.23.5:*:*:*:*:mongodb:*:*",
            "cpe:2.3:a:mongodb:c_driver:1.24.0:*:*:*:*:mongodb:*:*",
            "cpe:2.3:a:mongodb:c_driver:1.24.1:*:*:*:*:mongodb:*:*",
            "cpe:2.3:a:mongodb:c_driver:1.24.2:*:*:*:*:mongodb:*:*",
            "cpe:2.3:a:mongodb:c_driver:1.24.3:*:*:*:*:mongodb:*:*",
            "cpe:2.3:a:mongodb:c_driver:1.24.4:*:*:*:*:mongodb:*:*",
            "cpe:2.3:a:mongodb:c_driver:1.25.0:*:*:*:*:mongodb:*:*",
            "cpe:2.3:a:mongodb:c_driver:1.25.1:*:*:*:*:mongodb:*:*",
            "cpe:2.3:a:mongodb:c_driver:1.25.2:*:*:*:*:mongodb:*:*",
            "cpe:2.3:a:mongodb:c_driver:1.25.3:*:*:*:*:mongodb:*:*",
            "cpe:2.3:a:mongodb:c_driver:1.25.4:*:*:*:*:mongodb:*:*",
            "cpe:2.3:a:mongodb:c_driver:1.26.0:*:*:*:*:mongodb:*:*",
            "cpe:2.3:a:mongodb:c_driver:1.26.1:*:*:*:*:mongodb:*:*",
            "cpe:2.3:a:mongodb:php_driver:0.1.0:*:*:*:*:mongodb:*:*",
            "cpe:2.3:a:mongodb:php_driver:0.1.1:*:*:*:*:mongodb:*:*",
            "cpe:2.3:a:mongodb:php_driver:0.1.2:*:*:*:*:mongodb:*:*",
            "cpe:2.3:a:mongodb:php_driver:0.1.3:*:*:*:*:mongodb:*:*",
            "cpe:2.3:a:mongodb:php_driver:0.1.4:*:*:*:*:mongodb:*:*",
            "cpe:2.3:a:mongodb:php_driver:0.1.5:*:*:*:*:mongodb:*:*",
            "cpe:2.3:a:mongodb:php_driver:0.2.0:*:*:*:*:mongodb:*:*",
            "cpe:2.3:a:mongodb:php_driver:0.3.0:*:*:*:*:mongodb:*:*",
            "cpe:2.3:a:mongodb:php_driver:0.3.1:*:*:*:*:mongodb:*:*",
            "cpe:2.3:a:mongodb:php_driver:0.4.0:*:*:*:*:mongodb:*:*",
            "cpe:2.3:a:mongodb:php_driver:0.4.1:*:*:*:*:mongodb:*:*",
            "cpe:2.3:a:mongodb:php_driver:0.5.0:*:*:*:*:mongodb:*:*",
            "cpe:2.3:a:mongodb:php_driver:0.5.1:*:*:*:*:mongodb:*:*",
            "cpe:2.3:a:mongodb:php_driver:0.6.0:*:*:*:*:mongodb:*:*",
            "cpe:2.3:a:mongodb:php_driver:0.6.1:*:*:*:*:mongodb:*:*",
            "cpe:2.3:a:mongodb:php_driver:0.6.2:*:*:*:*:mongodb:*:*",
            "cpe:2.3:a:mongodb:php_driver:0.6.3:*:*:*:*:mongodb:*:*",
            "cpe:2.3:a:mongodb:php_driver:1.0.0:-:*:*:*:mongodb:*:*",
            "cpe:2.3:a:mongodb:php_driver:1.0.0:alpha1:*:*:*:mongodb:*:*",
            "cpe:2.3:a:mongodb:php_driver:1.0.0:alpha2:*:*:*:mongodb:*:*",
            "cpe:2.3:a:mongodb:php_driver:1.0.0:beta1:*:*:*:mongodb:*:*",
            "cpe:2.3:a:mongodb:php_driver:1.0.0:beta2:*:*:*:mongodb:*:*",
            "cpe:2.3:a:mongodb:php_driver:1.0.0:rc0:*:*:*:mongodb:*:*",
            "cpe:2.3:a:mongodb:php_driver:1.0.1:*:*:*:*:mongodb:*:*",
            "cpe:2.3:a:mongodb:php_driver:1.1.0:*:*:*:*:mongodb:*:*",
            "cpe:2.3:a:mongodb:php_driver:1.1.1:*:*:*:*:mongodb:*:*",
            "cpe:2.3:a:mongodb:php_driver:1.1.2:*:*:*:*:mongodb:*:*",
            "cpe:2.3:a:mongodb:php_driver:1.1.3:*:*:*:*:mongodb:*:*",
            "cpe:2.3:a:mongodb:php_driver:1.1.4:*:*:*:*:mongodb:*:*",
            "cpe:2.3:a:mongodb:php_driver:1.1.5:*:*:*:*:mongodb:*:*",
            "cpe:2.3:a:mongodb:php_driver:1.1.6:*:*:*:*:mongodb:*:*",
            "cpe:2.3:a:mongodb:php_driver:1.1.7:*:*:*:*:mongodb:*:*",
            "cpe:2.3:a:mongodb:php_driver:1.1.8:*:*:*:*:mongodb:*:*",
            "cpe:2.3:a:mongodb:php_driver:1.1.9:*:*:*:*:mongodb:*:*",
            "cpe:2.3:a:mongodb:php_driver:1.1.10:*:*:*:*:mongodb:*:*",
            "cpe:2.3:a:mongodb:php_driver:1.2.0:-:*:*:*:mongodb:*:*",
            "cpe:2.3:a:mongodb:php_driver:1.2.0:alpha1:*:*:*:mongodb:*:*",
            "cpe:2.3:a:mongodb:php_driver:1.2.0:alpha2:*:*:*:mongodb:*:*",
            "cpe:2.3:a:mongodb:php_driver:1.2.0:alpha3:*:*:*:mongodb:*:*",
            "cpe:2.3:a:mongodb:php_driver:1.2.1:*:*:*:*:mongodb:*:*",
            "cpe:2.3:a:mongodb:php_driver:1.2.2:*:*:*:*:mongodb:*:*",
            "cpe:2.3:a:mongodb:php_driver:1.2.3:*:*:*:*:mongodb:*:*",
            "cpe:2.3:a:mongodb:php_driver:1.2.4:*:*:*:*:mongodb:*:*",
            "cpe:2.3:a:mongodb:php_driver:1.2.5:*:*:*:*:mongodb:*:*",
            "cpe:2.3:a:mongodb:php_driver:1.2.6:*:*:*:*:mongodb:*:*",
            "cpe:2.3:a:mongodb:php_driver:1.2.7:*:*:*:*:mongodb:*:*",
            "cpe:2.3:a:mongodb:php_driver:1.2.8:*:*:*:*:mongodb:*:*",
            "cpe:2.3:a:mongodb:php_driver:1.2.9:*:*:*:*:mongodb:*:*",
            "cpe:2.3:a:mongodb:php_driver:1.2.10:*:*:*:*:mongodb:*:*",
            "cpe:2.3:a:mongodb:php_driver:1.2.11:*:*:*:*:mongodb:*:*",
            "cpe:2.3:a:mongodb:php_driver:1.3.0:-:*:*:*:mongodb:*:*",
            "cpe:2.3:a:mongodb:php_driver:1.3.0:beta1:*:*:*:mongodb:*:*",
            "cpe:2.3:a:mongodb:php_driver:1.3.0:beta2:*:*:*:mongodb:*:*",
            "cpe:2.3:a:mongodb:php_driver:1.3.0:rc1:*:*:*:mongodb:*:*",
            "cpe:2.3:a:mongodb:php_driver:1.3.1:*:*:*:*:mongodb:*:*",
            "cpe:2.3:a:mongodb:php_driver:1.3.2:*:*:*:*:mongodb:*:*",
            "cpe:2.3:a:mongodb:php_driver:1.3.3:*:*:*:*:mongodb:*:*",
            "cpe:2.3:a:mongodb:php_driver:1.3.4:*:*:*:*:mongodb:*:*",
            "cpe:2.3:a:mongodb:php_driver:1.4.0:-:*:*:*:mongodb:*:*",
            "cpe:2.3:a:mongodb:php_driver:1.4.0:beta1:*:*:*:mongodb:*:*",
            "cpe:2.3:a:mongodb:php_driver:1.4.0:rc1:*:*:*:mongodb:*:*",
            "cpe:2.3:a:mongodb:php_driver:1.4.0:rc2:*:*:*:mongodb:*:*",
            "cpe:2.3:a:mongodb:php_driver:1.4.1:*:*:*:*:mongodb:*:*",
            "cpe:2.3:a:mongodb:php_driver:1.4.2:*:*:*:*:mongodb:*:*",
            "cpe:2.3:a:mongodb:php_driver:1.4.3:*:*:*:*:mongodb:*:*",
            "cpe:2.3:a:mongodb:php_driver:1.4.4:*:*:*:*:mongodb:*:*",
            "cpe:2.3:a:mongodb:php_driver:1.5.0:*:*:*:*:mongodb:*:*",
            "cpe:2.3:a:mongodb:php_driver:1.5.1:*:*:*:*:mongodb:*:*",
            "cpe:2.3:a:mongodb:php_driver:1.5.2:*:*:*:*:mongodb:*:*",
            "cpe:2.3:a:mongodb:php_driver:1.5.3:*:*:*:*:mongodb:*:*",
            "cpe:2.3:a:mongodb:php_driver:1.5.4:*:*:*:*:mongodb:*:*",
            "cpe:2.3:a:mongodb:php_driver:1.5.5:*:*:*:*:mongodb:*:*",
            "cpe:2.3:a:mongodb:php_driver:1.6.0:-:*:*:*:mongodb:*:*",
            "cpe:2.3:a:mongodb:php_driver:1.6.0:alpha1:*:*:*:mongodb:*:*",
            "cpe:2.3:a:mongodb:php_driver:1.6.0:alpha2:*:*:*:mongodb:*:*",
            "cpe:2.3:a:mongodb:php_driver:1.6.0:alpha3:*:*:*:mongodb:*:*",
            "cpe:2.3:a:mongodb:php_driver:1.6.0:rc1:*:*:*:mongodb:*:*",
            "cpe:2.3:a:mongodb:php_driver:1.6.1:*:*:*:*:mongodb:*:*",
            "cpe:2.3:a:mongodb:php_driver:1.7.0:*:*:*:*:mongodb:*:*",
            "cpe:2.3:a:mongodb:php_driver:1.7.1:*:*:*:*:mongodb:*:*",
            "cpe:2.3:a:mongodb:php_driver:1.7.2:*:*:*:*:mongodb:*:*",
            "cpe:2.3:a:mongodb:php_driver:1.7.3:*:*:*:*:mongodb:*:*",
            "cpe:2.3:a:mongodb:php_driver:1.7.4:*:*:*:*:mongodb:*:*",
            "cpe:2.3:a:mongodb:php_driver:1.7.5:*:*:*:*:mongodb:*:*",
            "cpe:2.3:a:mongodb:php_driver:1.8.0:-:*:*:*:mongodb:*:*",
            "cpe:2.3:a:mongodb:php_driver:1.8.0:beta1:*:*:*:mongodb:*:*",
            "cpe:2.3:a:mongodb:php_driver:1.8.0:beta2:*:*:*:mongodb:*:*",
            "cpe:2.3:a:mongodb:php_driver:1.8.0:rc1:*:*:*:mongodb:*:*",
            "cpe:2.3:a:mongodb:php_driver:1.8.1:*:*:*:*:mongodb:*:*",
            "cpe:2.3:a:mongodb:php_driver:1.8.2:*:*:*:*:mongodb:*:*",
            "cpe:2.3:a:mongodb:php_driver:1.9.0:-:*:*:*:mongodb:*:*",
            "cpe:2.3:a:mongodb:php_driver:1.9.0:rc1:*:*:*:mongodb:*:*",
            "cpe:2.3:a:mongodb:php_driver:1.9.1:*:*:*:*:mongodb:*:*",
            "cpe:2.3:a:mongodb:php_driver:1.9.2:*:*:*:*:mongodb:*:*",
            "cpe:2.3:a:mongodb:php_driver:1.10.0:alpha1:*:*:*:mongodb:*:*",
            "cpe:2.3:a:mongodb:php_driver:1.10.0:*:*:*:*:mongodb:*:*",
            "cpe:2.3:a:mongodb:php_driver:1.11.0:alpha1:*:*:*:mongodb:*:*",
            "cpe:2.3:a:mongodb:php_driver:1.11.0:*:*:*:*:mongodb:*:*",
            "cpe:2.3:a:mongodb:php_driver:1.11.1:*:*:*:*:mongodb:*:*",
            "cpe:2.3:a:mongodb:php_driver:1.12.0:*:*:*:*:mongodb:*:*",
            "cpe:2.3:a:mongodb:php_driver:1.12.1:*:*:*:*:mongodb:*:*",
            "cpe:2.3:a:mongodb:php_driver:1.13.0:*:*:*:*:mongodb:*:*",
            "cpe:2.3:a:mongodb:php_driver:1.14.0:beta1:*:*:*:mongodb:*:*",
            "cpe:2.3:a:mongodb:php_driver:1.14.0:*:*:*:*:mongodb:*:*",
            "cpe:2.3:a:mongodb:php_driver:1.14.1:*:*:*:*:mongodb:*:*",
            "cpe:2.3:a:mongodb:php_driver:1.14.2:*:*:*:*:mongodb:*:*",
            "cpe:2.3:a:mongodb:php_driver:1.15.0:*:*:*:*:mongodb:*:*",
            "cpe:2.3:a:mongodb:php_driver:1.15.1:*:*:*:*:mongodb:*:*",
            "cpe:2.3:a:mongodb:php_driver:1.15.2:*:*:*:*:mongodb:*:*",
            "cpe:2.3:a:mongodb:php_driver:1.15.3:*:*:*:*:mongodb:*:*",
            "cpe:2.3:a:mongodb:php_driver:1.16.0:*:*:*:*:mongodb:*:*",
            "cpe:2.3:a:mongodb:php_driver:1.16.1:*:*:*:*:mongodb:*:*",
            "cpe:2.3:a:mongodb:php_driver:1.16.2:*:*:*:*:mongodb:*:*",
            "cpe:2.3:a:mongodb:php_driver:1.17.0:*:*:*:*:mongodb:*:*",
            "cpe:2.3:a:mongodb:php_driver:1.17.1:*:*:*:*:mongodb:*:*",
            "cpe:2.3:a:mongodb:php_driver:1.17.2:*:*:*:*:mongodb:*:*",
            "cpe:2.3:a:mongodb:php_driver:1.17.3:*:*:*:*:mongodb:*:*",
            "cpe:2.3:a:mongodb:php_driver:1.18.0:*:*:*:*:mongodb:*:*"
          ],
          "defaultStatus": "unaffected",
          "product": "MongoDB Server",
          "vendor": "MongoDB Inc",
          "versions": [
            {
              "lessThan": "5.0.27",
              "status": "affected",
              "version": "5.0",
              "versionType": "custom"
            },
            {
              "lessThan": "6.0.16",
              "status": "affected",
              "version": "6.0",
              "versionType": "custom"
            },
            {
              "lessThan": "7.0.12",
              "status": "affected",
              "version": "7.0",
              "versionType": "custom"
            },
            {
              "lessThan": "7.3.3",
              "status": "affected",
              "version": "7.3",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "product": "MongoDB C Driver",
          "vendor": "MongoDB Inc",
          "versions": [
            {
              "lessThan": "1.26.2",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "product": "MongoDB PHP Driver",
          "vendor": "MongoDB Inc",
          "versions": [
            {
              "lessThan": "1.18.1",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        }
      ],
      "configurations": [
        {
          "lang": "en",
          "supportingMedia": [
            {
              "base64": false,
              "type": "text/html",
              "value": "\u003cspan style=\"background-color: var(--wht);\"\u003eOnly environments with Windows as the underlying operating system is affected by this issue\u003c/span\u003e\u003cbr\u003e\u003ci\u003e\u003cbr\u003e\u003c/i\u003e\u003cbr\u003e"
            }
          ],
          "value": "Only environments with Windows as the underlying operating system is affected by this issue"
        }
      ],
      "credits": [
        {
          "lang": "en",
          "type": "finder",
          "value": "T. Do\u011fa Geli\u015fli"
        }
      ],
      "datePublic": "2024-08-07T09:55:00.000Z",
      "descriptions": [
        {
          "lang": "en",
          "supportingMedia": [
            {
              "base64": false,
              "type": "text/html",
              "value": "\u003cspan style=\"background-color: rgb(255, 255, 255);\"\u003eIncorrect validation of files loaded from a local untrusted directory may allow local privilege escalation if the underlying operating systems is Windows. This may result in the application executing arbitrary behaviour determined by the contents of untrusted files. This issue affects MongoDB Server v5.0 versions prior to 5.0.27, MongoDB Server v6.0 versions prior to 6.0.16, MongoDB Server v7.0 versions prior to 7.0.12, MongoDB Server v7.3 versions prior 7.3.3, MongoDB C Driver versions prior to 1.26.2 and MongoDB PHP Driver versions prior to 1.18.1.\u003c/span\u003e\u003cbr\u003e\u003cbr\u003e\u003cp\u003e\u003cb\u003eRequired Configuration:\u003c/b\u003e\u003c/p\u003e\u003cp\u003eOnly environments with Windows as the underlying operating system is affected by this issue\u003c/p\u003e"
            }
          ],
          "value": "Incorrect validation of files loaded from a local untrusted directory may allow local privilege escalation if the underlying operating systems is Windows. This may result in the application executing arbitrary behaviour determined by the contents of untrusted files. This issue affects MongoDB Server v5.0 versions prior to 5.0.27, MongoDB Server v6.0 versions prior to 6.0.16, MongoDB Server v7.0 versions prior to 7.0.12, MongoDB Server v7.3 versions prior 7.3.3, MongoDB C Driver versions prior to 1.26.2 and MongoDB PHP Driver versions prior to 1.18.1.\n\nRequired Configuration:\n\nOnly environments with Windows as the underlying operating system is affected by this issue"
        }
      ],
      "metrics": [
        {
          "cvssV3_1": {
            "attackComplexity": "LOW",
            "attackVector": "LOCAL",
            "availabilityImpact": "HIGH",
            "baseScore": 7.3,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "LOW",
            "scope": "UNCHANGED",
            "userInteraction": "REQUIRED",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "format": "CVSS",
          "scenarios": [
            {
              "lang": "en",
              "value": "GENERAL"
            }
          ]
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-284",
              "description": "CWE-284: Improper Access Control",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2024-08-07T12:51:42.281Z",
        "orgId": "a39b4221-9bd0-4244-95fc-f3e2e07f1deb",
        "shortName": "mongodb"
      },
      "references": [
        {
          "url": "https://jira.mongodb.org/browse/PHPC-2369"
        },
        {
          "url": "https://jira.mongodb.org/browse/SERVER-93211"
        },
        {
          "url": "https://jira.mongodb.org/browse/CDRIVER-5650"
        }
      ],
      "source": {
        "discovery": "EXTERNAL"
      },
      "title": "Accessing Untrusted Directory May Allow Local Privilege Escalation",
      "x_generator": {
        "engine": "Vulnogram 0.2.0"
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "a39b4221-9bd0-4244-95fc-f3e2e07f1deb",
    "assignerShortName": "mongodb",
    "cveId": "CVE-2024-7553",
    "datePublished": "2024-08-07T09:57:49.818Z",
    "dateReserved": "2024-08-06T08:34:10.195Z",
    "dateUpdated": "2024-08-07T15:27:46.258Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2021-32050 (GCVE-0-2021-32050)

Vulnerability from cvelistv5 – Published: 2023-08-29 15:24 – Updated: 2025-11-03 19:25

Title

Some MongoDB Drivers may publish events containing authentication-related data to a command listener configured by an application

Summary

Some MongoDB Drivers may erroneously publish events containing authentication-related data to a command listener configured by an application. The published events may contain security-sensitive data when specific authentication-related commands are executed. Without due care, an application may inadvertently expose this sensitive information, e.g., by writing it to a log file. This issue only arises if an application enables the command listener feature (this is not enabled by default). This issue affects the MongoDB C Driver 1.0.0 prior to 1.17.7, MongoDB PHP Driver 1.0.0 prior to 1.9.2, MongoDB Swift Driver 1.0.0 prior to 1.1.1, MongoDB Node.js Driver 3.6 prior to 3.6.10, MongoDB Node.js Driver 4.0 prior to 4.17.0 and MongoDB Node.js Driver 5.0 prior to 5.8.0. This issue also affects users of the MongoDB C++ Driver dependent on the C driver 1.0.0 prior to 1.17.7 (C++ driver prior to 3.7.0).

Severity

4.2 (Medium)


                        
                          CVSS:3.1/AV:L/AC:L/PR:H/UI:R/S:U/C:H/I:N/A:N

SSVC

Exploitation: none Automatable: no Technical Impact: partial

CISA Coordinator (v2.0.3)

CWE

CWE-200 - Exposure of Sensitive Information to an Unauthorized Actor

Assigner

mongodb

References

7 references

URL	Tags
https://jira.mongodb.org/browse/PHPC-1869
https://jira.mongodb.org/browse/CXX-2028
https://jira.mongodb.org/browse/SWIFT-1229
https://jira.mongodb.org/browse/CDRIVER-3797
https://jira.mongodb.org/browse/NODE-3356
https://security.netapp.com/advisory/ntap-2023100…
https://lists.debian.org/debian-lts-announce/2025…

Impacted products

5 products

Vendor	Product	Version
MongoDB Inc	MongoDB C Driver	Affected: 1.0.0 , < 1.17.7 (custom)
MongoDB Inc	MongoDB C++ Driver	Affected: 3.0.0 , < 3.7.0 (custom)
MongoDB Inc	MongoDB PHP Driver	Affected: 1.0.0 , < 1.9.2 (custom)
MongoDB Inc	MongoDB Swift Driver	Affected: 1.0.0 , < 1.1.1 (custom)
MongoDB Inc	MongoDB Node.js Driver	Affected: 3.6 , < 3.6.10 (custom) Affected: 4.0 , < 4.17.0 (custom) Affected: 5.0 , < 5.8.0 (custom)

Date Public

2023-08-29 16:21

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2025-11-03T19:25:48.021Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://jira.mongodb.org/browse/PHPC-1869"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://jira.mongodb.org/browse/CXX-2028"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://jira.mongodb.org/browse/SWIFT-1229"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://jira.mongodb.org/browse/CDRIVER-3797"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://jira.mongodb.org/browse/NODE-3356"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://security.netapp.com/advisory/ntap-20231006-0001/"
          },
          {
            "url": "https://lists.debian.org/debian-lts-announce/2025/05/msg00027.html"
          }
        ],
        "title": "CVE Program Container"
      },
      {
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2021-32050",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2024-09-30T17:34:56.433321Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2024-09-30T17:46:35.484Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "defaultStatus": "unaffected",
          "product": "MongoDB C Driver",
          "vendor": "MongoDB Inc",
          "versions": [
            {
              "lessThan": "1.17.7",
              "status": "affected",
              "version": "1.0.0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "product": "MongoDB C++ Driver",
          "vendor": "MongoDB Inc",
          "versions": [
            {
              "lessThan": "3.7.0",
              "status": "affected",
              "version": "3.0.0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "product": "MongoDB PHP Driver",
          "vendor": "MongoDB Inc",
          "versions": [
            {
              "lessThan": "1.9.2",
              "status": "affected",
              "version": "1.0.0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "product": "MongoDB Swift Driver",
          "vendor": "MongoDB Inc",
          "versions": [
            {
              "lessThan": "1.1.1",
              "status": "affected",
              "version": "1.0.0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "product": "MongoDB Node.js Driver",
          "vendor": "MongoDB Inc",
          "versions": [
            {
              "lessThan": "3.6.10",
              "status": "affected",
              "version": "3.6",
              "versionType": "custom"
            },
            {
              "lessThan": "4.17.0",
              "status": "affected",
              "version": "4.0",
              "versionType": "custom"
            },
            {
              "lessThan": "5.8.0",
              "status": "affected",
              "version": "5.0",
              "versionType": "custom"
            }
          ]
        }
      ],
      "configurations": [
        {
          "lang": "en",
          "supportingMedia": [
            {
              "base64": false,
              "type": "text/html",
              "value": "\u003cp\u003eThis issue only arises if an application enables the command listener feature (this is not enabled by default).\u003c/p\u003e"
            }
          ],
          "value": "This issue only arises if an application enables the command listener feature (this is not enabled by default)."
        }
      ],
      "datePublic": "2023-08-29T16:21:00.000Z",
      "descriptions": [
        {
          "lang": "en",
          "supportingMedia": [
            {
              "base64": false,
              "type": "text/html",
              "value": "\u003cp\u003eSome MongoDB Drivers may erroneously publish events containing authentication-related data to a command listener configured by an application. The published events may contain security-sensitive data when specific authentication-related commands are executed.\u003c/p\u003e\u003cp\u003eWithout due care, an application may inadvertently expose this sensitive information, e.g., by writing it to a log file. This issue only arises if an application enables the command listener feature (this is not enabled by default).\u003c/p\u003e\u003cp\u003eThis issue affects the MongoDB C Driver 1.0.0 prior to 1.17.7, MongoDB PHP Driver 1.0.0 prior to 1.9.2, MongoDB Swift Driver 1.0.0 prior to 1.1.1, MongoDB Node.js Driver 3.6 prior to 3.6.10, MongoDB Node.js Driver 4.0 prior to 4.17.0 and MongoDB Node.js Driver 5.0 prior to 5.8.0. This issue also affects users of the MongoDB C++ Driver dependent on the C driver 1.0.0 prior to 1.17.7 (C++ driver prior to 3.7.0).\u003c/p\u003e"
            }
          ],
          "value": "Some MongoDB Drivers may erroneously publish events containing authentication-related data to a command listener configured by an application. The published events may contain security-sensitive data when specific authentication-related commands are executed.\n\nWithout due care, an application may inadvertently expose this sensitive information, e.g., by writing it to a log file. This issue only arises if an application enables the command listener feature (this is not enabled by default).\n\nThis issue affects the MongoDB C Driver 1.0.0 prior to 1.17.7, MongoDB PHP Driver 1.0.0 prior to 1.9.2, MongoDB Swift Driver 1.0.0 prior to 1.1.1, MongoDB Node.js Driver 3.6 prior to 3.6.10, MongoDB Node.js Driver 4.0 prior to 4.17.0 and MongoDB Node.js Driver 5.0 prior to 5.8.0. This issue also affects users of the MongoDB C++ Driver dependent on the C driver 1.0.0 prior to 1.17.7 (C++ driver prior to 3.7.0)."
        }
      ],
      "metrics": [
        {
          "cvssV3_1": {
            "attackComplexity": "LOW",
            "attackVector": "LOCAL",
            "availabilityImpact": "NONE",
            "baseScore": 4.2,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "NONE",
            "privilegesRequired": "HIGH",
            "scope": "UNCHANGED",
            "userInteraction": "REQUIRED",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:H/UI:R/S:U/C:H/I:N/A:N",
            "version": "3.1"
          },
          "format": "CVSS",
          "scenarios": [
            {
              "lang": "en",
              "value": "GENERAL"
            }
          ]
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-200",
              "description": "CWE-200 Exposure of Sensitive Information to an Unauthorized Actor",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2023-10-06T14:06:49.026Z",
        "orgId": "a39b4221-9bd0-4244-95fc-f3e2e07f1deb",
        "shortName": "mongodb"
      },
      "references": [
        {
          "url": "https://jira.mongodb.org/browse/PHPC-1869"
        },
        {
          "url": "https://jira.mongodb.org/browse/CXX-2028"
        },
        {
          "url": "https://jira.mongodb.org/browse/SWIFT-1229"
        },
        {
          "url": "https://jira.mongodb.org/browse/CDRIVER-3797"
        },
        {
          "url": "https://jira.mongodb.org/browse/NODE-3356"
        },
        {
          "url": "https://security.netapp.com/advisory/ntap-20231006-0001/"
        }
      ],
      "source": {
        "discovery": "INTERNAL"
      },
      "title": "Some MongoDB Drivers may publish events containing authentication-related data to a command listener configured by an application",
      "x_generator": {
        "engine": "Vulnogram 0.1.0-dev"
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "a39b4221-9bd0-4244-95fc-f3e2e07f1deb",
    "assignerShortName": "mongodb",
    "cveId": "CVE-2021-32050",
    "datePublished": "2023-08-29T15:24:30.389Z",
    "dateReserved": "2021-05-05T14:29:29.717Z",
    "dateUpdated": "2025-11-03T19:25:48.021Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

Find a vulnerability

Search criteria ⓘ Use this form to refine search results.
Full-text search supports keyword queries with ranking and filtering.
You can combine vendor, product, and sources to narrow results.
Enable “Apply ordering” to sort by date instead of relevance.

6 vulnerabilities found for php_driver by mongodb

CVE-2025-12119 (GCVE-0-2025-12119)

CVE-2024-7553 (GCVE-0-2024-7553)

CVE-2021-32050 (GCVE-0-2021-32050)

CVE-2025-12119 (GCVE-0-2025-12119)

CVE-2024-7553 (GCVE-0-2024-7553)

CVE-2021-32050 (GCVE-0-2021-32050)

Find a vulnerability

Search criteria ⓘ Use this form to refine search results. Full-text search supports keyword queries with ranking and filtering. You can combine vendor, product, and sources to narrow results. Enable “Apply ordering” to sort by date instead of relevance.

6 vulnerabilities found for php_driver by mongodb

CVE-2025-12119 (GCVE-0-2025-12119)

CVE-2024-7553 (GCVE-0-2024-7553)

CVE-2021-32050 (GCVE-0-2021-32050)

CVE-2025-12119 (GCVE-0-2025-12119)

CVE-2024-7553 (GCVE-0-2024-7553)

CVE-2021-32050 (GCVE-0-2021-32050)

Search criteria ⓘ Use this form to refine search results.
Full-text search supports keyword queries with ranking and filtering.
You can combine vendor, product, and sources to narrow results.
Enable “Apply ordering” to sort by date instead of relevance.