CVSS 3.1
7.5 highCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:NCVE-2024-6382
High (7.5) in mongodb rust driver. EPSS 0.3% chance of exploitation in the next 30 days. Fixed in mongodb 2.8.2.
Incorrect handling of certain string inputs may result in MongoDB Rust driver constructing unintended server commands. This may cause unexpected application behavior including data modification. This issue affects MongoDB Rust Driver 2.0 versions prior to 2.8.2
Severity
- EPSS
- 0.3% chance of exploitation in the next 30 days; higher than 20% of CVEs (scores of 2026-10-31)
- CWE
- CWE-228
- Published
- Modified
- Record from
- the NVD, synced
Affected
- mongodb:rust_driver
Packages (OSV)
| Advisory | Ecosystem | Package | Affected | Fixed in |
|---|---|---|---|---|
| GHSA-32jf-h775-g29h | crates.io | mongodb | >=2.0.0 <2.8.2 | 2.8.2 |