CVE-2024-7553

See a problem?
Please try reporting it to the source first.
Source
https://cve.org/CVERecord?id=CVE-2024-7553
Import Source
https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2024-7553.json
JSON Data
https://api.osv.dev/v1/vulns/CVE-2024-7553
Aliases
Downstream
Published
2024-08-07T09:57:49.818Z
Modified
2026-07-22T03:36:01.210900Z
Severity
  • 7.3 (High) CVSS_V3 - CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H CVSS Calculator
Summary
Accessing Untrusted Directory May Allow Local Privilege Escalation
Details

Incorrect validation of files loaded from a local untrusted directory may allow local privilege escalation if the underlying operating systems is Windows. This may result in the application executing arbitrary behaviour determined by the contents of untrusted files. This issue affects MongoDB Server v5.0 versions prior to 5.0.27, MongoDB Server v6.0 versions prior to 6.0.16, MongoDB Server v7.0 versions prior to 7.0.12, MongoDB Server v7.3 versions prior 7.3.3, MongoDB C Driver versions prior to 1.26.2 and MongoDB PHP Driver versions prior to 1.18.1.

Required Configuration:

Only environments with Windows as the underlying operating system is affected by this issue

Database specific 
{
    "cna_assigner": "mongodb",
    "osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2024/7xxx/CVE-2024-7553.json",
    "unresolved_ranges": [
        {
            "extracted_events": [
                {
                    "introduced": "5.0"
                },
                {
                    "fixed": "5.0.27"
                },
                {
                    "introduced": "6.0"
                },
                {
                    "fixed": "6.0.16"
                },
                {
                    "introduced": "7.0"
                },
                {
                    "fixed": "7.0.12"
                },
                {
                    "introduced": "7.3"
                },
                {
                    "fixed": "7.3.3"
                },
                {
                    "fixed": "1.26.2"
                },
                {
                    "fixed": "1.18.1"
                }
            ],
            "source": "AFFECTED_FIELD"
        }
    ],
    "cwe_ids": [
        "CWE-284"
    ]
}
References

Affected packages

Git
github.com/mongodb/mongo

Affected ranges

Type
GIT
Repo
https://github.com/mongodb/mongo
Events
Introduced
1184f004a99660de6f5e745573419bda8a28c0e9
Fixed
0a095119d792a0dc719fceb932267f4a33dd51e8
Introduced
e61bf27c2f6a83fed36e5a13c008a32d563babe2
Fixed
fc9c412204fdb4876f706cb62a45c1e98b5543fb
Introduced
37d84072b5c5b9fd723db5fa133fb202ad2317f1
Fixed
e1aa498db8bee013a82646b02f04ee878e0e4bbf
Introduced
b4d4f7026332c345edc52f9687e509f74e95a0fb
Fixed
23576ef75f59692926df6e8829a0f3addb384885
Database specific 
{
    "cpe": "cpe:2.3:a:mongodb:mongodb:*:*:*:*:*:*:*:*",
    "extracted_events": [
        {
            "introduced": "5.0.0"
        },
        {
            "fixed": "5.0.27"
        },
        {
            "introduced": "6.0.0"
        },
        {
            "fixed": "6.0.16"
        },
        {
            "introduced": "7.0.0"
        },
        {
            "fixed": "7.0.12"
        },
        {
            "introduced": "7.3.0"
        },
        {
            "fixed": "7.3.3"
        }
    ],
    "source": "CPE_RANGE"
}

Affected versions

r5.*
r5.0.0
r5.0.1
r5.0.1-rc0
r5.0.10
r5.0.10-rc0
r5.0.11
r5.0.11-rc0
r5.0.11-rc1
r5.0.12
r5.0.12-rc0
r5.0.13
r5.0.13-rc0
r5.0.14
r5.0.14-rc0
r5.0.15
r5.0.15-rc0
r5.0.15-rc1
r5.0.15-rc2
r5.0.16
r5.0.16-rc0
r5.0.17
r5.0.17-rc0
r5.0.18
r5.0.18-rc0
r5.0.18-rc1
r5.0.18-rc2
r5.0.19
r5.0.19-rc0
r5.0.2
r5.0.2-rc0
r5.0.20
r5.0.20-rc0
r5.0.20-rc1
r5.0.21
r5.0.21-rc0
r5.0.22
r5.0.22-rc0
r5.0.22-rc1
r5.0.23
r5.0.23-rc0
r5.0.24
r5.0.24-rc0
r5.0.25
r5.0.25-rc0
r5.0.26
r5.0.26-rc0
r5.0.3
r5.0.3-rc0
r5.0.3-rc1
r5.0.3-rc2
r5.0.4
r5.0.4-rc0
r5.0.5
r5.0.5-rc0
r5.0.6
r5.0.6-rc0
r5.0.6-rc1
r5.0.6-rc2
r5.0.7
r5.0.7-rc0
r5.0.7-rc1
r5.0.8
r5.0.8-rc0
r5.0.9
r5.0.9-rc0
r5.0.9-rc1
r6.*
r6.0.0
r6.0.1
r6.0.1-rc0
r6.0.10
r6.0.10-rc0
r6.0.11
r6.0.11-rc0
r6.0.12
r6.0.12-rc0
r6.0.12-rc1
r6.0.13
r6.0.13-rc0
r6.0.14
r6.0.14-rc0
r6.0.14-rc1
r6.0.15
r6.0.15-rc0
r6.0.2
r6.0.2-rc0
r6.0.2-rc1
r6.0.3
r6.0.3-rc0
r6.0.3-rc1
r6.0.3-rc2
r6.0.4
r6.0.4-rc0
r6.0.4-rc1
r6.0.5
r6.0.5-rc0
r6.0.5-rc1
r6.0.6
r6.0.6-rc0
r6.0.6-rc1
r6.0.7
r6.0.7-rc0
r6.0.8
r6.0.8-rc0
r6.0.9
r6.0.9-rc0
r6.0.9-rc1
r7.*
r7.0.0
r7.0.1
r7.0.1-rc0
r7.0.10
r7.0.10-rc0
r7.0.11
r7.0.11-rc0
r7.0.11-rc1
r7.0.11-rc2
r7.0.12-rc0
r7.0.2
r7.0.2-rc0
r7.0.2-rc1
r7.0.2-rc2
r7.0.3
r7.0.3-rc0
r7.0.3-rc1
r7.0.4
r7.0.4-rc0
r7.0.5
r7.0.5-rc0
r7.0.6
r7.0.6-rc0
r7.0.7
r7.0.7-rc0
r7.0.7-rc1
r7.0.7-rc2
r7.0.8
r7.0.8-rc0
r7.0.9
r7.0.9-rc0
r7.0.9-rc1
r7.3.0
r7.3.1
r7.3.1-rc0
r7.3.1-rc1
r7.3.1-rc2
r7.3.2
r7.3.2-rc0
r7.3.2-rc1

Database specific

vanir_signatures_modified 
"2026-07-22T03:36:01Z"
vanir_signatures 
[
    {
        "target": {
            "file": "src/mongo/db/catalog/validate_adaptor.cpp"
        },
        "id": "CVE-2024-7553-02994c0e",
        "digest": {
            "line_hashes": [
                "329913852977053609459348688876833772491",
                "27916421123273442154788625867936558300",
                "254702237974878015461965003870539828486",
                "69421658026751040608409740480749280563",
                "59917524354465280083159754591568849064",
                "118018153581426355201273610055412648538",
                "202532364772967976656763415643466941211",
                "47734924488772846956200476706272185238",
                "161212334903003241711487295786793226842",
                "244456038624490861842252424110816638544",
                "322863289751779914270480716810515554130",
                "210052204172846521702750367235445809096",
                "134110601181299761084451138273808492779",
                "20805998714756534432480840491877179793",
                "198655128569990713992246152435318790910",
                "68737470364433947102250526007507987068",
                "193141080203447453096678275169688079311",
                "274647368727423873631935008094415250900",
                "6268980372646714086915409820431349257",
                "84984221224533540388982641104063897055",
                "55005143038296249055982544406153960039",
                "197818085694772290256155776757570881861",
                "325037879151098428754255884609382879360",
                "221619187051515016168802315609371653260",
                "120466451140107615920068057742060470260",
                "180553256761516972613130832338620776690",
                "242805896369546415456463004820945610401",
                "25479116213114791816244574489579503173",
                "301856799049377450880407501137723803495",
                "293097896970528646890797003707406205470",
                "89033067201110874503040566667736809461",
                "80679747684782025787908739992128731839",
                "300319027487364620971993600040520359164",
                "134632868906332286542540803647382438968",
                "255774180792678301400293503718771711460",
                "40787414203996703021934373762299843031",
                "332243771555207044190096874014908344315",
                "236909820442148586509339669249705154549",
                "154384632052279004074215527500682061602",
                "233611330147428695231606866826892012747",
                "247411118473579998750781502684875537232",
                "106483436017133997274245817681143584591",
                "182970895451744785784745563594047291081",
                "147768537146537731830905577488937472841",
                "297181038508343489747653048707178530232",
                "31960323565502150100950393037137472491",
                "141035720272936282041387270664732570818",
                "72377435735075893685270530673520870212",
                "336060587749944256689127264340034840781"
            ],
            "threshold": 0.9
        },
        "deprecated": false,
        "signature_version": "v1",
        "signature_type": "Line",
        "source": "https://github.com/mongodb/mongo/commit/fc9c412204fdb4876f706cb62a45c1e98b5543fb"
    },
    {
        "target": {
            "file": "src/mongo/dbtests/validate_tests.cpp"
        },
        "id": "CVE-2024-7553-0e081e84",
        "digest": {
            "line_hashes": [
                "1770885869270750480141319907863994746",
                "19520909800484761539646821662919742939",
                "216726665403661884986091132459081168134",
                "304935351436049255276440523825985770317",
                "153380889861364499314029019562908192937",
                "164186630264173411481843701519291681473",
                "284208359225685349437689824140631392636"
            ],
            "threshold": 0.9
        },
        "deprecated": false,
        "signature_version": "v1",
        "signature_type": "Line",
        "source": "https://github.com/mongodb/mongo/commit/fc9c412204fdb4876f706cb62a45c1e98b5543fb"
    },
    {
        "target": {
            "function": "ValidateAdaptor::traverseIndex",
            "file": "src/mongo/db/catalog/validate_adaptor.cpp"
        },
        "id": "CVE-2024-7553-61a1ae8a",
        "digest": {
            "function_hash": "102081938924117680613651894140190709282",
            "length": 5100.0
        },
        "deprecated": false,
        "signature_version": "v1",
        "signature_type": "Function",
        "source": "https://github.com/mongodb/mongo/commit/fc9c412204fdb4876f706cb62a45c1e98b5543fb"
    },
    {
        "target": {
            "file": "src/mongo/db/concurrency/lock_state.h"
        },
        "id": "CVE-2024-7553-6af3ced8",
        "digest": {
            "line_hashes": [
                "314654536095043183637371322138239410638",
                "174735725970083152049936852950523398986",
                "80631528736024170706229284856256956231",
                "1466669372744118300558502035314136441"
            ],
            "threshold": 0.9
        },
        "deprecated": false,
        "signature_version": "v1",
        "signature_type": "Line",
        "source": "https://github.com/mongodb/mongo/commit/0a095119d792a0dc719fceb932267f4a33dd51e8"
    },
    {
        "target": {
            "function": "_validateKeyOrder",
            "file": "src/mongo/db/catalog/validate_adaptor.cpp"
        },
        "id": "CVE-2024-7553-9b563fd2",
        "digest": {
            "function_hash": "274673260755196232339555212731228073531",
            "length": 1161.0
        },
        "deprecated": false,
        "signature_version": "v1",
        "signature_type": "Function",
        "source": "https://github.com/mongodb/mongo/commit/fc9c412204fdb4876f706cb62a45c1e98b5543fb"
    }
]
source 
"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2024-7553.json"
github.com/mongodb/mongo-c-driver

Affected ranges

Type
GIT
Repo
https://github.com/mongodb/mongo-c-driver
Events
Introduced
0 Unknown introduced commit / All previous commits are affected
Fixed
586171d661f584d841bdc32fc998e9f6cf903228
Database specific 
{
    "cpe": "cpe:2.3:a:mongodb:c_driver:*:*:*:*:*:mongodb:*:*",
    "extracted_events": [
        {
            "introduced": "0"
        },
        {
            "fixed": "1.26.2"
        }
    ],
    "source": "CPE_RANGE"
}

Affected versions

0.*
0.90.0
0.92.0
0.92.2
0.94.0
0.94.2
0.96.0
0.96.4
0.98.0
0.98.2
1.*
1.0.0
1.0.2
1.1.0
1.1.0-rc0
1.1.10
1.1.11
1.1.2
1.1.4
1.1.5
1.1.6
1.1.7
1.1.8
1.1.9
1.11.0
1.26.0
1.26.1
1.3.0
1.3.0-rc0
1.4.0-beta1
1.5.0-rc0
1.5.0-rc1
1.5.0-rc2
1.5.0-rc3
1.5.0-rc4
1.6.0
1.6.0-rc0
1.7.0-rc0
1.9.0-rc0
1.9.0-rc1

Database specific

source 
"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2024-7553.json"
github.com/mongodb/mongo-php-driver

Affected ranges

Type
GIT
Repo
https://github.com/mongodb/mongo-php-driver
Events
Introduced
0 Unknown introduced commit / All previous commits are affected
Fixed
451fec46cb4854ece7f791b75ae22ba2e62839db
Database specific 
{
    "cpe": "cpe:2.3:a:mongodb:php_driver:*:*:*:*:*:mongodb:*:*",
    "extracted_events": [
        {
            "introduced": "0"
        },
        {
            "fixed": "1.18.1"
        }
    ],
    "source": "CPE_RANGE"
}

Affected versions

0.*
0.1.0
0.1.1
0.1.2
0.1.3
0.1.4
0.1.5
0.2.0
0.3.0
0.3.1
0.4.0
0.4.1
0.5.0
0.5.1
0.6.0
0.6.1
0.6.2
0.6.3
1.*
1.0.0
1.0.0RC0
1.0.0alpha1
1.0.0alpha2
1.0.0beta1
1.0.0beta2
1.1.0
1.1.1
1.1.2
1.1.3
1.1.4
1.10.0alpha1
1.11.0
1.11.0alpha1
1.12.0
1.13.0
1.14.0
1.14.0beta1
1.15.0
1.17.0
1.18.0
1.2.0
1.2.0alpha1
1.2.0alpha2
1.2.0alpha3
1.2.1
1.2.2
1.2.3
1.3.0
1.3.0RC1
1.3.0beta1
1.3.0beta2
1.3.1
1.4.0RC1
1.4.0beta1
1.5.0
1.6.0RC1
1.6.0alpha1
1.6.0alpha2
1.6.0alpha3

Database specific

source 
"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2024-7553.json"