Skip to content
OpenAdvisories
Medium WID-SEC-2023-0441 1 CVE

MongoDB: Schwachstelle ermöglicht Codeausführung

Published Feb 21, 2023 · Updated Feb 21, 2023 · de-DE

Platform: Linux Platform: Windows

Summary

Ein entfernter, authentisierter Angreifer kann eine Schwachstelle in MongoDB ausnutzen, um beliebigen Programmcode auszuführen.

Product

MongoDB ist ein Open-Source-Dokumentendatenbank.

Vulnerabilities 1

  • Medium 6.6
    CVE-2022-48282

    Deserializing compromised object with MongoDB .NET/C# Driver may cause remote code execution

    Under very specific circumstances (see Required configuration section below), a privileged user is able to cause arbitrary code to be executed which may cause further disruption to services. This is specific to applications written in C#. This affects all Mon…

    MongoDB MongoDB .NET/C# Driver MongoDB.Driver NuGet

Revision history

  1. #1

    Initiale Fassung

References