CVE-2024-6382
1 advisory.
crates.io/mongodb CVE-2024-6382: medium 6.4
MongoDB Rust driver may issue unintended commands
Action: Upgrade mongodb to 2.8.2 or later.
cargo update -p mongodb --precise 2.8.2Affected
| introduced | fixed | last affected |
|---|---|---|
| 2.0.0 | 2.8.2 | - |
Fixed versions
| 2.8.2 |
Sources
- osv: GHSA-32jf-h775-g29h
- https://nvd.nist.gov/vuln/detail/CVE-2024-6382
- https://github.com/mongodb/mongo-rust-driver/pull/1045
- https://github.com/mongodb/mongo-rust-driver/commit/8eac3bc6dc37a6d7667ed6c1a895c224e3ff47e1
- https://github.com/mongodb/mongo-rust-driver/commit/a3fe6c84ce6287348b1268f651fdac9fbed66187
- https://github.com/mongodb/mongo-rust-driver
- https://jira.mongodb.org/browse/RUST-1881
CVE-2024-6382 · published · modified · JSON