Skip to content
OpenAdvisories
Medium · 6.4 CVE-2024-6382 EUVD-2024-47489GHSA-32jf-h775-g29h

Adversarial unsanitized input may cause MongoDB Rust Driver to issue unintended commands.

Published Jul 2, 2024 · Updated Aug 1, 2024 · Assigned by mongodb

Description

Incorrect handling of certain string inputs may result in MongoDB Rust driver constructing unintended server commands. This may cause unexpected application behavior including data modification. This issue affects MongoDB Rust Driver 2.0 versions prior to 2.8.2

Affected products

VendorProductAffectedFixed
MongoDB MongoDB Rust Driver 2.0 – < 2.8.2 2.8.2

Affected packages

EcosystemPackageAffectedFixedRecord
crates.io mongodb >= 2.0.0, < 2.8.2 2.8.2 GHSA-32jf-h775-g29h

Advisories 1

References