Approved changes feed: RSS · Atom

cpe:2.3:a:mongodb:php_driver:0.1.5:*:*:*:*:mongodb:*:*

part: a version: 0.1.5 update: *

VendorMongodb (1aa156a6-63a9-5032-baaf-10197d408a1e)
ProductPhp Driver (08cbe4e5-c8a1-5db1-a88a-3741a461d576)
Edition*
Language*
Software edition*
Target softwaremongodb
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
pkg:github/mongodb/mongo-php-driver purl2cpe 2026-06-01 10:11:17.538561

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2024-7553 vulnerable 2026-06-03 14:58:06.261194 Accessing Untrusted Directory May Allow Local Privilege Escalation
HIGH (7.3)
Incorrect validation of files loaded from a local untrusted directory may allow local privilege escalation if the underlying operating systems is Windows. This may result in the application executing arbitrary behaviour determined by the contents of untrusted files. This issue affects MongoDB Server v5.0 versions prior to 5.0.27, MongoDB Server v6.0 versions prior to 6.0.16, MongoDB Server v7.0 versions prior to 7.0.12, MongoDB Server v7.3 versions prior 7.3.3, MongoDB C Driver versions prior to 1.26.2 and MongoDB PHP Driver versions prior to 1.18.1. Required Configuration: Only environments with Windows as the underlying operating system is affected by this issue
Published: 2024-08-07T09:57:49.818Z
Updated: 2024-08-07T15:27:46.258Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.