Описание
MongoDB Rust driver may issue unintended commands
Incorrect handling of certain string inputs may result in MongoDB Rust driver constructing unintended server commands. This may cause unexpected application behavior including data modification. This issue affects MongoDB Rust Driver 2.0 versions prior to 2.8.2
Ссылки
- https://nvd.nist.gov/vuln/detail/CVE-2024-6382
- https://github.com/mongodb/mongo-rust-driver/pull/1045
- https://github.com/mongodb/mongo-rust-driver/commit/8eac3bc6dc37a6d7667ed6c1a895c224e3ff47e1
- https://github.com/mongodb/mongo-rust-driver/commit/a3fe6c84ce6287348b1268f651fdac9fbed66187
- https://jira.mongodb.org/browse/RUST-1881
Пакеты
mongodb
>= 2.0.0, < 2.8.2
2.8.2
Связанные уязвимости
Incorrect handling of certain string inputs may result in MongoDB Rust driver constructing unintended server commands. This may cause unexpected application behavior including data modification. This issue affects MongoDB Rust Driver 2.0 versions prior to 2.8.2
Уязвимость драйвера системы управления базами данных MongoDB Rust Driver, связанная с некорректной обработкой синтаксически неверной структуры, позволяющая нарушителю выполнить произвольные команды