Mongodb Inc Mongodb Php Driver vulnerabilities
2 known vulnerabilities affecting mongodb_inc/mongodb_php_driver.
Total CVEs
2
CISA KEV
0
Public exploits
0
Exploited in wild
0
Severity breakdown
HIGH2
Vulnerabilities
Page 1 of 1
CVE-2024-7553HIGHCVSS 7.8fixed in 1.18.12024-08-07
CVE-2024-7553 [HIGH] CWE-284 CVE-2024-7553: Incorrect validation of files loaded from a local untrusted directory may allow local privilege esca
Incorrect validation of files loaded from a local untrusted directory may allow local privilege escalation if the underlying operating systems is Windows. This may result in the application executing arbitrary behaviour determined by the contents of untrusted files. This issue affects MongoDB Server v5.0 versions prior to 5.0.27, MongoDB Server v6.0 ver
cvelistv5nvd
CVE-2021-32050HIGHCVSS 7.5≥ 1.0.0, < 1.9.22023-08-29
CVE-2021-32050 [HIGH] CWE-200 CVE-2021-32050: Some MongoDB Drivers may erroneously publish events containing authentication-related data to a comm
Some MongoDB Drivers may erroneously publish events containing authentication-related data to a command listener configured by an application. The published events may contain security-sensitive data when specific authentication-related commands are executed.
Without due care, an application may inadvertently expose this sensitive information, e.g.,
cvelistv5nvd