CVE-2024-6382

Adversarial unsanitized input may cause MongoDB Rust Driver to issue unintended commands.

CVSS 6.4 MEDIUMEPSS 0.3%CWE-228

Incorrect handling of certain string inputs may result in MongoDB Rust driver constructing unintended server commands. This may cause unexpected application behavior including data modification. This issue affects MongoDB Rust Driver 2.0 versions prior to 2.8.2

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:N/I:L/A:L

Produtos afetados

MongoDB Inc · MongoDB Rust Driver

Quer saber se a sua infraestrutura está exposta a isto?

Falar com a TrueHacking →

Referências

https://jira.mongodb.org/browse/RUST-1881