Vulnerability Details CVE-2024-6382
Incorrect handling of certain string inputs may result in MongoDB Rust driver constructing unintended server commands. This may cause unexpected application behavior including data modification. This issue affects MongoDB Rust Driver 2.0 versions prior to 2.8.2
Exploit prediction scoring system (EPSS) score
EPSS Score 0.001
EPSS Ranking 30.3%
CVSS Severity
CVSS v3 Score 6.4
Products affected by CVE-2024-6382
-
cpe:2.3:a:mongodb:rust_driver:2.0.0
-
cpe:2.3:a:mongodb:rust_driver:2.0.1
-
cpe:2.3:a:mongodb:rust_driver:2.0.2
-
cpe:2.3:a:mongodb:rust_driver:2.1.0
-
cpe:2.3:a:mongodb:rust_driver:2.2.0
-
cpe:2.3:a:mongodb:rust_driver:2.2.1
-
cpe:2.3:a:mongodb:rust_driver:2.2.2
-
cpe:2.3:a:mongodb:rust_driver:2.2.3
-
cpe:2.3:a:mongodb:rust_driver:2.3.0
-
cpe:2.3:a:mongodb:rust_driver:2.3.1
-
cpe:2.3:a:mongodb:rust_driver:2.4.0
-
cpe:2.3:a:mongodb:rust_driver:2.5.0
-
cpe:2.3:a:mongodb:rust_driver:2.6.0
-
cpe:2.3:a:mongodb:rust_driver:2.6.1
-
cpe:2.3:a:mongodb:rust_driver:2.7.0
-
cpe:2.3:a:mongodb:rust_driver:2.7.1
-
cpe:2.3:a:mongodb:rust_driver:2.8.0
-
cpe:2.3:a:mongodb:rust_driver:2.8.1