VYPR
← All advisories
Medium severity6.4NVD Advisory· Published Jul 2, 2024· Updated Jun 17, 2026

CVE-2024-6382

CVE-2024-6382

Description

Incorrect handling of certain string inputs may result in MongoDB Rust driver constructing unintended server commands. This may cause unexpected application behavior including data modification. This issue affects MongoDB Rust Driver 2.0 versions prior to 2.8.2

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected packages

Versions sourced from the GitHub Security Advisory.

PackageAffected versionsPatched versions
mongodbcrates.io
>= 2.0.0, < 2.8.22.8.2

Affected products

3
  • MongoDB Inc/MongoDB Rust Driverv5
    cpe:2.3:a:mongodb:rust-driver:2.0.0:alpha:*:*:*:mongodb:*:*
    Range: 2.0
  • MongoDB/Rust Driver
    cpe:2.3:a:mongodb:rust_driver:*:*:*:*:*:mongodb:*:*
    Range: >=2.0.0,<2.8.2
  • ghsa-coords
    pkg:cargo/mongodb
    Range: >= 2.0.0, < 2.8.2

Patches

Vulnerability mechanics

References

6

News mentions

0

No linked articles in our index yet.