CVE-2025-1756 - CERT CVE
ID CVE-2025-1756
Sažetak mongosh may be susceptible to local privilege escalation under certain conditions potentially enabling unauthorized actions on a user's system with elevated privilege, when a crafted file is stored in C:\node_modules\. This issue affects mongosh prior to 2.3.0
Reference
CVSS
Base: 7.5
Impact: 6.0
Exploitability:0.8
Pristup
VektorSloženostAutentikacija
LOCAL HIGH LOW
Impact
PovjerljivostCjelovitostDostupnost
HIGH HIGH HIGH
CVSS vektor CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:C/C:H/I:H/A:H
Zadnje važnije ažuriranje 27-02-2025 - 16:15
Objavljeno 27-02-2025 - 16:15