Approved changes feed: RSS · Atom

cpe:2.3:a:mongodb:c_driver:1.4.0:beta1:*:*:*:mongodb:*:*

part: a version: 1.4.0 update: beta1

VendorMongodb (1aa156a6-63a9-5032-baaf-10197d408a1e)
ProductC Driver (23f7cc4a-8240-53c8-8593-cedcd3090749)
Edition*
Language*
Software edition*
Target softwaremongodb
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
pkg:deb/debian/mongo-c-driver purl2cpe 2026-06-01 10:11:17.457551
pkg:deb/ubuntu/mongo-c-driver purl2cpe 2026-06-01 10:11:17.457552
pkg:github/mongodb/mongo-c-driver purl2cpe 2026-06-01 10:11:17.457554
pkg:rpm/fedora/mongo-c-driver purl2cpe 2026-06-01 10:11:17.457555
pkg:rpm/opensuse/mongo-c-driver purl2cpe 2026-06-01 10:11:17.457556

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2024-7553 vulnerable 2026-06-03 14:58:06.199516 Accessing Untrusted Directory May Allow Local Privilege Escalation
HIGH (7.3)
Incorrect validation of files loaded from a local untrusted directory may allow local privilege escalation if the underlying operating systems is Windows. This may result in the application executing arbitrary behaviour determined by the contents of untrusted files. This issue affects MongoDB Server v5.0 versions prior to 5.0.27, MongoDB Server v6.0 versions prior to 6.0.16, MongoDB Server v7.0 versions prior to 7.0.12, MongoDB Server v7.3 versions prior 7.3.3, MongoDB C Driver versions prior to 1.26.2 and MongoDB PHP Driver versions prior to 1.18.1. Required Configuration: Only environments with Windows as the underlying operating system is affected by this issue
Published: 2024-08-07T09:57:49.818Z
Updated: 2024-08-07T15:27:46.258Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.