{"id":"GHSA-7j9m-j397-g4wx","summary":"MongoDB .NET/C# Driver vulnerable to Deserialization of Untrusted Data","details":"Under very specific circumstances, a privileged user is able to cause arbitrary code to be executed which may cause further disruption to services. This is specific to applications written in C#. This affects all MongoDB .NET/C# Driver versions prior to and including v2.18.0","aliases":["CVE-2022-48282"],"modified":"2023-11-08T04:11:02.878311Z","published":"2023-02-21T21:30:18Z","database_specific":{"github_reviewed_at":"2023-03-03T22:58:41Z","nvd_published_at":"2023-02-21T19:15:00Z","cwe_ids":["CWE-502"],"severity":"HIGH","github_reviewed":true},"references":[{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2022-48282"},{"type":"PACKAGE","url":"https://github.com/mongodb/mongo-csharp-driver"},{"type":"WEB","url":"https://github.com/mongodb/mongo-csharp-driver/releases/tag/v2.19.0"},{"type":"WEB","url":"https://jira.mongodb.org/CSHARP-4475"},{"type":"WEB","url":"https://jira.mongodb.org/browse/CSHARP-4475"}],"affected":[{"package":{"name":"MongoDB.Driver","ecosystem":"NuGet","purl":"pkg:nuget/MongoDB.Driver"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.19.0"}]}],"versions":["1.0.3744.30075","2.0.0","2.0.0-beta1","2.0.0-beta2","2.0.0-beta3","2.0.0-beta4","2.0.0-rc0","2.0.1","2.0.2","2.1.0","2.1.0-rc0","2.1.0-rc1","2.1.1","2.10.0","2.10.0-beta1","2.10.1","2.10.2","2.10.3","2.10.4","2.11.0","2.11.0-beta1","2.11.0-beta2","2.11.1","2.11.2","2.11.3","2.11.4","2.11.5","2.11.6","2.12.0","2.12.0-beta1","2.12.1","2.12.2","2.12.3","2.12.4","2.12.5","2.13.0","2.13.0-beta1","2.13.1","2.13.2","2.13.3","2.14.0","2.14.0-beta1","2.14.1","2.15.0","2.15.1","2.16.0","2.16.1","2.17.0","2.17.1","2.18.0","2.2.0","2.2.0-rc0","2.2.1","2.2.2","2.2.3","2.2.4","2.3.0","2.3.0-beta1","2.3.0-rc1","2.4.0","2.4.0-beta1","2.4.1","2.4.2","2.4.3","2.4.4","2.5.0","2.5.1","2.6.0","2.6.1","2.7.0","2.7.0-beta0001","2.7.1","2.7.2","2.7.3","2.8.0","2.8.1","2.9.0","2.9.0-beta1","2.9.0-beta2","2.9.1","2.9.2","2.9.3"],"database_specific":{"source":"https://github.com/github/advisory-database/blob/main/advisories/github-reviewed/2023/02/GHSA-7j9m-j397-g4wx/GHSA-7j9m-j397-g4wx.json"}}],"schema_version":"1.9.0","severity":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H"}]}