Fiche vulnérabilité
CVE-2025-1756 : faille élevée mongodb mongosh (CVSS 7.8)
Description
mongosh may be susceptible to local privilege escalation under certain conditions potentially enabling unauthorized actions on a user's system with elevated privilege, when a crafted file is stored in C:\node_modules\. This issue affects mongosh prior to 2.3.0
En bref
- Sévérité
- Élevée (CVSS 7.8)
- Vecteur CVSS
- CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
- Exploitation active
- Non signalée par la CISA
- Publication
- 27 févr. 2025
- Dernière mise à jour
- 17 juin 2026
Produits concernés
- mongodb mongosh
- redhat codeready linux builder eus
- redhat codeready linux builder for arm64 eus
- redhat codeready linux builder for ibm z systems eus
- redhat codeready linux builder for power little endian eus
- redhat enterprise linux update services for sap solutions
- redhat enterprise linux eus
- redhat enterprise linux for arm 64
- redhat enterprise linux for arm 64 eus
- redhat enterprise linux for ibm z systems
- redhat enterprise linux for ibm z systems eus
- redhat enterprise linux for power little endian eus
- redhat enterprise linux server aus