CyberRota Analysis
AI-GeneratedThe MongoDB BI Connector ODBC Driver is vulnerable to a memory-safety issue when handling output parameters from stored procedures, specifically when connected to an untrusted or impersonated database server that delivers malicious metadata. This vulnerability can lead to process termination, exposure of sensitive process memory, or potentially arbitrary code execution. Organizations using MongoDB, particularly those leveraging the BI Connector, should prioritize patching this vulnerability to mitigate the associated risks.
Public Exploit Signal
A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.
Note: these links are listed for security research and verification purposes only.
Original NVD Description
An application using the MongoDB BI Connector ODBC Driver may experience a memory-safety issue when processing output parameters from a stored procedure. Triggering this issue requires connecting to an untrusted or impersonated database server that returns crafted metadata. This may result in process termination, disclosure of process memory, or, under certain conditions, arbitrary code execution.