CVE-2024-6382mediumCWE-228

CVE-2024-6382: medium-severity vulnerability in MongoDB Rust Driver

Adversarial unsanitized input may cause MongoDB Rust Driver to issue unintended commands.

Published · Updated

Follow this CVE+ Monitor Rust Driver+ Monitor mongodb

E-mail alert when it lands in KEV, gets a public PoC or its score goes up.

13Vexday Risk Score

No sign of exploitation. No public exploitation artifact known so far.

ssvc Trackcvss 6.4epss 0.3%
Incorrect handling of certain string inputs may result in MongoDB Rust driver constructing unintended server commands. This may cause unexpected application behavior including data modification. This issue affects MongoDB Rust Driver 2.0 versions prior to 2.8.2
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:N/I:L/A:L
Affected products
MongoDB Inc · MongoDB Rust Driver