Skip to main content

Vendor/product archive

mongodb / mongosh CVEs

Beta · best-effort

4 CVEs tagged to mongodb / mongosh0 Critical, 2 High, 1 Medium, 1 Low, 0 Unrated.

CVE-2025-1693

Published Feb 27, 2025

The MongoDB Shell may be susceptible to control character injection where an attacker with control over the database cluster contents can inject control characters into the shell…

CVSS 3.9 · Low
evidence mentions
1
Buzz score
11.9
Vendor/product tagsBeta · best-effort

CVE-2025-1692

Published Feb 27, 2025

The MongoDB Shell may be susceptible to control character injection where an attacker with control of the user’s clipboard could manipulate them to paste text into mongosh that ev…

CVSS 6.3 · Medium
evidence mentions
1
Buzz score
11.9
Vendor/product tagsBeta · best-effort

CVE-2025-1691

Published Feb 27, 2025

The MongoDB Shell may be susceptible to control character injection where an attacker with control of the mongosh autocomplete feature, can use the autocompletion feature to input…

CVSS 7.6 · High
evidence mentions
1
Buzz score
11.9
Vendor/product tagsBeta · best-effort
Showing 1-4 of 4 CVEsPage 1 of 1