CVE-2024-6382CWE-228

Adversarial unsanitized input may cause MongoDB Rust Driver to issue unintended commands.

Medium · published July 2, 2024

CVSS v3.1
6.4
EPSS
0%
Percentile
19.1
In the wild
Unconfirmed
What it is

Incorrect handling of certain string inputs may result in MongoDB Rust driver constructing unintended server commands. This may cause unexpected application behavior including data modification. This issue affects MongoDB Rust Driver 2.0 versions prior to 2.8.2

The record
Technical detail
CVSS v3.1
6.4 · MEDIUM
Vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:N/I:L/A:L
CVSS v4.0
Not supplied
EPSS
0.00277 · 19.1th percentile
Weakness
CWE-228 · Improper Handling of Syntactically Invalid Structure
Published
2024-07-02T17:17Z
EPSS history
Timeline
  • 02 JUL 17:17Z
    Adversarial unsanitized input may cause MongoDB Rust Driver to issue unintended commands.
    cvelistv5