GitHub Advisoryadvisory · crates.io

GHSA-32jf-h775-g29h MongoDB Rust driver may issue unintended commands

MEDIUM Published 2024-07-02 Modified 2025-10-02 Official page ↗
Aliases
CVE-2024-6382
Ecosystem
crates.io
Packages
mongodb
Severity
Moderate
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:N/I:L/A:L
Weaknesses
CWE-228
Reviewed
2025-10-02

Affected packages

• crates.io mongodb: >= 2.0.0, < 2.8.2 → fixed in 2.8.2

Description

Incorrect handling of certain string inputs may result in MongoDB Rust driver constructing unintended server commands. This may cause unexpected application behavior including data modification. This issue affects MongoDB Rust Driver 2.0 versions prior to 2.8.2

Related

Alias · CVE (1)

  • CVE-2024-6382 Incorrect handling of certain string inputs may result in MongoDB Rust driver constructing unintended server commands. vulnerability

Weakness · CWE (1)

  • CWE-228 Improper Handling of Syntactically Invalid Structure weakness

References