MongoDB Rust driver may issue unintended commands
Incorrect handling of certain string inputs may result in MongoDB Rust driver constructing unintended server commands. This may cause unexpected application behavior including data modification. This issue affects MongoDB Rust Driver 2.0 versions prior to 2.8.2
01
describes (1)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2024-6382US | high7.5 | — | ||
Incorrect handling of certain string inputs may result in MongoDB Rust driver constructing unintended server commands. This may cause unexpected application behavior including data… | ||||
02
references
External citations — patches, advisories, analysis.
- https://github.com/mongodb/mongo-rust-driverPACKAGE
- https://github.com/mongodb/mongo-rust-driver/commit/8eac3bc6dc37a6d7667ed6c1a895c224e3ff47e1WEB
- https://github.com/mongodb/mongo-rust-driver/commit/a3fe6c84ce6287348b1268f651fdac9fbed66187WEB
- https://github.com/mongodb/mongo-rust-driver/pull/1045WEB
- https://jira.mongodb.org/browse/RUST-1881WEB
- https://nvd.nist.gov/vuln/detail/CVE-2024-6382ADVISORY
scry
Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.
Free scan