CyberRota Analysis
AI-GeneratedThe MongoDB C++ Driver is vulnerable due to improper handling of caller-supplied namespace identifiers, allowing the inclusion of special characters. This flaw can lead to unauthorized read and write access to data belonging to other logical tenants if applications use unvalidated input to construct namespace identifiers. Organizations utilizing the MongoDB C++ Driver should prioritize addressing this vulnerability to prevent potential data breaches and unauthorized access.
Public Exploit Signal
A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.
Note: these links are listed for security research and verification purposes only.
Original NVD Description
A weakness in the MongoDB C++ Driver's handling of caller-supplied namespace identifiers allows special characters embedded in those identifiers. An application that builds a namespace identifier from untrusted input without validating it may therefore have its operation directed at a different target than intended. This can result in limited unauthorized read and write access to data belonging to another logical tenant of the affected application.