CVE-2025-1756
MongoDB Shell may be susceptible to local privilege escalation in Windows
Résumé
MongoDB Shell may be susceptible to local privilege escalation in Windows
Description d'origine
La description telle que publiée par la source (souvent en anglais).
mongosh may be susceptible to local privilege escalation under certain conditions potentially enabling unauthorized actions on a user's system with elevated privilege, when a crafted file is stored in C:\node_modules. This issue affects mongosh prior to 2.3.0
Source: OSV.dev (Open Source Vulnerabilities) NVD GitHub Advisory OSV
Références
- advisory access.redhat.com
- advisory github.com
- advisory nvd.nist.gov
- web jira.mongodb.org