CVE-2024-3371

6.8 mediumEPSS 0.2%

Medium (6.8) in mongodb compass. EPSS 0.2% chance of exploitation in the next 30 days.

MongoDB Compass may accept and use insufficiently validated input from an untrusted external source. This may cause unintended application behavior, including data disclosure and enabling attackers to impersonate users. This issue affects MongoDB Compass versions 1.35.0 to 1.42.0.

Severity

CVSS 3.1

6.8 medium

CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:N

EPSS: 0.2% chance of exploitation in the next 30 days; higher than 14% of CVEs (scores of 2026-10-31)
CWE: CWE-360
Published: 2024-04-24
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

mongodb:compass

References

https://jira.mongodb.org/browse/COMPASS-7260
https://jira.mongodb.org/browse/COMPASS-7260

Check your stack JSON