Unrated severityNVD Advisory· Published Apr 24, 2024· Updated Aug 7, 2024
Insufficient validation of external input in Compass may enable MITM attacks
CVE-2024-3371
Description
MongoDB Compass may accept and use insufficiently validated input from an untrusted external source. This may cause unintended application behavior, including data disclosure and enabling attackers to impersonate users. This issue affects MongoDB Compass versions 1.35.0 to 1.42.0.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
2- MongoDB Inc/MongoDB Compassv5cpe:2.3:a:mongodb:compass:1.35.0:*:*:*:*:*:*:*Range: 1.35.0
- Range: 1.35.0 to 1.42.0
Patches
Vulnerability mechanics
References
1News mentions
0No linked articles in our index yet.