1. Home
  2. CVE Database
  3. CVE-2024-3371
HIGH · 7.1

CVE-2024-3371

MongoDB Compass may accept and use insufficiently validated input from an untrusted external source. This may cause unintended application behavior, including data disclosure and enabling attackers to...

Vulnerability Description

MongoDB Compass may accept and use insufficiently validated input from an untrusted external source. This may cause unintended application behavior, including data disclosure and enabling attackers to impersonate users. This issue affects MongoDB Compass versions 1.35.0 to 1.42.0.

CVSS Score

7.1

HIGH

CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:L
Attack Vector
NETWORK
Attack Complexity
HIGH
Privileges Required
LOW
User Interaction
NONE
Scope
UNCHANGED
Confidentiality
HIGH
Integrity
HIGH
Availability
LOW

Affected Products

VendorProductVersions
MongodbCompass>= 1.35.0, < 1.42.1

Related Weaknesses (CWE)

CWE-360

References

FAQ

What is CVE-2024-3371?

CVE-2024-3371 is a vulnerability with a CVSS score of 7.1 (HIGH). MongoDB Compass may accept and use insufficiently validated input from an untrusted external source. This may cause unintended application behavior, including data disclosure and enabling attackers to...

How severe is CVE-2024-3371?

CVE-2024-3371 has been rated HIGH with a CVSS base score of 7.1/10. Review the CVSS metrics above for detailed severity breakdown.

Is there a patch for CVE-2024-3371?

Check the references section above for vendor advisories and patch information. Affected products include: Mongodb Compass.