← Back

CVE-2024-6382

nvd nist
Published: Jul 2, 2024Modified: Jun 17, 2026

JSON object

Loading...
7.5
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N
Exploitability: 3.9 / Impact: 3.6
Source: NVD

Description

Incorrect handling of certain string inputs may result in MongoDB Rust driver constructing unintended server commands. This may cause unexpected application behavior including data modification. This issue affects MongoDB Rust Driver 2.0 versions prior to 2.8.2

Affected (1)

Products: Mongodb: Rust Driver
Mongodb
1 product
Rust Driver
Configuration A
1 vulnerable
Vulnerable SoftwareAffected Versions
Rust Driver
From 2.0.0 to 2.8.2

Related CWEs

CWE-228
Improper Handling of Syntactically Invalid Structure
The product does not handle or incorrectly handles input that is not syntactically well-formed with respect to the associated specification.

References (2)

Source: cna@mongodb.com
Issue TrackingVendor Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Issue TrackingVendor Advisory

Timeline

No history available yet.