CVE-2024-3371

MongoDB Compass may accept and use insufficiently validated input from an untrusted external source. This may cause unintended application behavior, including data disclosure and enabling attackers to impersonate users. This issue affects MongoDB Compass versions 1.35.0 to 1.42.0.

Score

CVSS 3.1 7.1 High

Status

Analyzed - cna@mongodb.com

Published

2024-04-24

Last modified

2024-08-07

Weaknesses

CWE-360

Affected products

• Compass (Mongodb)

References

• https://jira.mongodb.org/browse/COMPASS-7260