Mend.io Vulnerability Database

What is a CVE vulnerability ID? icon What is a WS vulnerability ID? icon What is an MSC vulnerability ID? icon
New vulnerability? Tell us about it!
icon

We found results for “”

CVE-2024-6382

Date: July 2, 2024

Incorrect handling of certain string inputs may result in MongoDB Rust driver constructing unintended server commands. This may cause unexpected application behavior including data modification. This issue affects MongoDB Rust Driver 2.0 versions prior to 2.8.2

Language: RUST

Severity Score

Related Resources (7)

https://github.com/mongodb/mongo-rust-driver/commit/8eac3bc6dc37a6d7667ed6c1a895c224e3ff47e1
https://github.com/mongodb/mongo-rust-driver
https://jira.mongodb.org/browse/RUST-1881
https://github.com/mongodb/mongo-rust-driver/pull/1045
https://nvd.nist.gov/vuln/detail/CVE-2024-6382
https://github.com/mongodb/mongo-rust-driver/commit/a3fe6c84ce6287348b1268f651fdac9fbed66187
https://www.mend.io/vulnerability-database/CVE-2024-6382

Severity Score

Weakness Type (CWE)

Improper Handling of Syntactically Invalid Structure

CWE-228

CVSS v3.1

Base Score:
Attack Vector (AV): NETWORK
Attack Complexity (AC): LOW
Privileges Required (PR): LOW
User Interaction (UI): NONE
Scope (S): CHANGED
Confidentiality (C): NONE
Integrity (I): LOW
Availability (A): LOW

Do you need more information?

Contact Us