Search/CVE-2024-6382
● CVE — Medium

CVE-2024-6382

Incorrect handling of certain string inputs may result in MongoDB Rust driver constructing unintended server commands. This may cause unexpected application behavior including data modification. This issue affects MongoDB Rust Driver 2.0 versions prior to 2.8.2

View graph Watch Export
CVSS v3.1
6.4 MEDIUM
EPSS
0.28%
probability of exploitation in 30 days
CISA KEV
Not listed
no confirmed exploitation reported
News coverage
0
sources referencing this CVE
CVSS v3.1 Detail
Attack VectorNETWORK
Attack ComplexityLOW
Privileges RequiredLOW
User InteractionNONE
ScopeCHANGED
ConfidentialityNONE
IntegrityLOW
AvailabilityLOW
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:N/I:L/A:L
Connections
2 relationships
Timeline
disclosure → media coverage
Jul 2, 2024
Disclosure — published as a CVE record. · last revised by NVD Oct 2, 2025