CyberRota Analysis
AI-GeneratedThe MongoDB C Driver is vulnerable due to insufficient sanitization of special elements in user-supplied database and collection names, potentially allowing attackers to manipulate operations to target unintended resources. This weakness could lead to unauthorized access or data manipulation if untrusted input is incorporated into these name components. Organizations using the MongoDB C Driver, especially those handling untrusted input, should prioritize addressing this vulnerability to mitigate risks to their database operations.
Public Exploit Signal
A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.
Note: these links are listed for security research and verification purposes only.
Original NVD Description
A weakness in the MongoDB C Driver allows special elements in caller-supplied database and collection name components to pass without sanitization when the driver composes the target namespace for an operation. An application that incorporates untrusted input into these name components can have operations directed at a resource other than the one intended.