{"resultsPerPage":1,"startIndex":0,"totalResults":1,"format":"NVD_CVE","version":"2.0","timestamp":"2026-05-03T07:00:25.417","vulnerabilities":[{"cve":{"id":"CVE-2025-1692","sourceIdentifier":"cna@mongodb.com","published":"2025-02-27T13:15:11.413","lastModified":"2025-09-22T16:40:56.037","vulnStatus":"Analyzed","cveTags":[],"descriptions":[{"lang":"en","value":"The MongoDB Shell may be susceptible to control character injection where an attacker with control of the user’s clipboard could manipulate them to paste text into mongosh that evaluates arbitrary code. Control characters in the pasted text can be used to obfuscate malicious code. This issue affects mongosh versions prior to 2.3.9"},{"lang":"es","value":"El shell de MongoDB puede ser susceptible a la inyección de caracteres de control, donde un atacante con control del portapapeles del usuario podría manipularlo para pegar texto en Mongosh que evalúa código arbitrario. Los caracteres de control en el texto pegado se pueden utilizar para ofuscar código malicioso. Este problema afecta a las versiones de Mongosh anteriores a la 2.3.9."}],"metrics":{"cvssMetricV31":[{"source":"cna@mongodb.com","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:L/AC:H/PR:H/UI:R/S:U/C:H/I:H/A:H","baseScore":6.3,"baseSeverity":"MEDIUM","attackVector":"LOCAL","attackComplexity":"HIGH","privilegesRequired":"HIGH","userInteraction":"REQUIRED","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH"},"exploitabilityScore":0.3,"impactScore":5.9},{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","baseScore":8.8,"baseSeverity":"HIGH","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"REQUIRED","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH"},"exploitabilityScore":2.8,"impactScore":5.9}]},"weaknesses":[{"source":"cna@mongodb.com","type":"Secondary","description":[{"lang":"en","value":"CWE-150"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:mongodb:mongosh:*:*:*:*:*:*:*:*","versionEndExcluding":"2.3.9","matchCriteriaId":"A1799B29-2838-4948-BD93-2D8611DB9620"}]}]}],"references":[{"url":"https://jira.mongodb.org/browse/MONGOSH-2025","source":"cna@mongodb.com","tags":["Issue Tracking","Vendor Advisory"]}]}}]}