Threats tagged 'bit-mongodb-2024-7553'

1 threat

Severity	CVSS	Signals	Threat	Source	Published	Score and star
High	–	EPSS 0.3%	CVE-2024-7553Mongodb · Accessing Untrusted Directory May Allow Local Privilege Escalation HighEPSS 0.3%2024-09-20GCVE DatabaseCVE-2024-7553 A local privilege escalation vulnerability exists in MongoDB Server on Windows due to improper validation of files loaded from untrusted local directories. This flaw allows an attacker with local access to cause the application to execute arbitrary behavior based on malicious file contents. The issue affects MongoDB Server versions prior to 5.0.27, 6.0.16, and 7.0.12 on Windows, as well as certain MongoDB C and PHP driver versions. A fix is available for the affected versions. EPSS 0.3%Vulnerability #bit-mongodb-2024-7553 #bitnami	GCVE Database	2024-09-20

Page 1 of 1