CVE-2024-3371

published 2024-04-24

CVE-2024-3371: MongoDB Compass may accept and use insufficiently validated input from an untrusted external source. This may cause unintended application behavior, including…

Priority P3 37 medium 6.8 CVSS 3.1

AV N AC H PR L UI N S U C H I H A N

MongoDB Compass may accept and use insufficiently validated input from an untrusted external source. This may cause unintended application behavior, including data disclosure and enabling attackers to impersonate users. This issue affects MongoDB Compass versions 1.35.0 to 1.42.0.

Affected

5 ranges

Vendor	Product	Version range	Fixed in
jenkins	bitbucket_branch_source_plugin	—	—
jenkins	structs_plugin	—	—
jenkins	when_structs_plugin	—	—
mongodb	compass	>= 1.35.0 < 1.42.1	1.42.1
mongodb_inc	mongodb_compass	1.35.0 – 1.42.0	—

Stop checking back — get the weekly exploitation signal.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.

CWE-360