CVE-2024-6382

Adversarial unsanitized input may cause MongoDB Rust Driver to issue unintended commands.

State: Published
Severity: 6.4 Medium
Published: Jul 2, 2024
Updated: Aug 1, 2024
Reserved: Jun 27, 2024

Description

Incorrect handling of certain string inputs may result in MongoDB Rust driver constructing unintended server commands. This may cause unexpected application behavior including data modification. This issue affects MongoDB Rust Driver 2.0 versions prior to 2.8.2

Scores

CVSS	Score	Vector	Source
3.1	6.4 Medium	CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:N/I:L/A:L	mongodb

Weaknesses

CWE-228 Improper Handling of Syntactically Invalid Structure

Affected Products

Product	Versions
MongoDB Rust DriverMongoDB Inc	2.0 to before 2.8.2Affected

References

https://jira.mongodb.org/browse/RUST-1881

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.