GHSA-7j9m-j397-g4wx

Source

https://github.com/advisories/GHSA-7j9m-j397-g4wx

Import Source

https://github.com/github/advisory-database/blob/main/advisories/github-reviewed/2023/02/GHSA-7j9m-j397-g4wx/GHSA-7j9m-j397-g4wx.json

JSON Data

https://api.osv.dev/v1/vulns/GHSA-7j9m-j397-g4wx

Aliases

CVE-2022-48282

Published

2023-02-21T21:30:18Z

Modified

2023-11-08T04:11:02.878311Z

Severity

7.2 (High) CVSS_V3 - CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H CVSS Calculator

Summary

MongoDB .NET/C# Driver vulnerable to Deserialization of Untrusted Data

Details

Under very specific circumstances, a privileged user is able to cause arbitrary code to be executed which may cause further disruption to services. This is specific to applications written in C#. This affects all MongoDB .NET/C# Driver versions prior to and including v2.18.0

Database specific

{
    "nvd_published_at": "2023-02-21T19:15:00Z",
    "github_reviewed_at": "2023-03-03T22:58:41Z",
    "severity": "HIGH",
    "github_reviewed": true,
    "cwe_ids": [
        "CWE-502"
    ]
}

References

Affected packages

NuGet / MongoDB.Driver

Package

Name: MongoDB.Driver; View open source insights on deps.dev
Purl: pkg:nuget/MongoDB.Driver

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

2.19.0

Affected versions

1.*

1.0.3744.30075

2.*

2.0.0-beta1

2.0.0-beta2

2.0.0-beta3

2.0.0-beta4

2.0.0-rc0

2.0.0

2.0.1

2.0.2

2.1.0-rc0

2.1.0-rc1

2.1.0

2.1.1

2.2.0-rc0

2.2.0

2.2.1

2.2.2

2.2.3

2.2.4

2.3.0-beta1

2.3.0-rc1

2.3.0

2.4.0-beta1

2.4.0

2.4.1

2.4.2

2.4.3

2.4.4

2.5.0

2.5.1

2.6.0

2.6.1

2.7.0-beta0001

2.7.0

2.7.1

2.7.2

2.7.3

2.8.0

2.8.1

2.9.0-beta1

2.9.0-beta2

2.9.0

2.9.1

2.9.2

2.9.3

2.10.0-beta1

2.10.0

2.10.1

2.10.2

2.10.3

2.10.4

2.11.0-beta1

2.11.0-beta2

2.11.0

2.11.1

2.11.2

2.11.3

2.11.4

2.11.5

2.11.6

2.12.0-beta1

2.12.0

2.12.1

2.12.2

2.12.3

2.12.4

2.12.5

2.13.0-beta1

2.13.0

2.13.1

2.13.2

2.13.3

2.14.0-beta1

2.14.0

2.14.1

2.15.0

2.15.1

2.16.0

2.16.1

2.17.0

2.17.1

2.18.0