CVE-2025-1692mediumCWE-150

CVE-2025-1692: falha de média gravidade em MongoDB Inc mongosh

MongoDB Shell may be susceptible to control character injection via pasting

Publicada em

Seguir esta CVE+ Monitorar mongosh+ Monitorar mongosh

Aviso por e-mail quando ela entrar no KEV, ganhar PoC pública ou subir de nota.

13Vexday Risk Score

Sem sinal de exploração. Nenhum artefato público de exploração conhecido até agora.

ssvc Trackcvss 6.3epss 0.3%
The MongoDB Shell may be susceptible to control character injection where an attacker with control of the user’s clipboard could manipulate them to paste text into mongosh that evaluates arbitrary code. Control characters in the pasted text can be used to obfuscate malicious code. This issue affects mongosh versions prior to 2.3.9
CVSS:3.1/AV:L/AC:H/PR:H/UI:R/S:U/C:H/I:H/A:H
Produtos afetados
MongoDB Inc · mongosh
CVEs relacionadas — MongoDB Inc mongosh

No mesmo produto, das mais perigosas para as menos.

CVE-2025-1691HIGHMongoDB Shell may be susceptible to Control Character Injection via autocompleteEPSS 0.4%CVE-2025-1693LOWMongoDB Shell may be susceptible to control character Injection via shell outputEPSS 0.2%CVE-2025-1756HIGHMongoDB Shell may be susceptible to local privilege escalation in WindowsEPSS 0.2%