Skip to content
CVE PROGRAM SOURCE RECORD7.0 High

CVE-2024-6376

ejson shell parser in MongoDB Compass maybe bypassed

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
mongodb

Description

MongoDB Compass may be susceptible to code injection due to insufficient sandbox protection settings with the usage of ejson shell parser in Compass' connection handling. This issue affects MongoDB Compass versions prior to version 1.42.2

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

MongoDB Inc MongoDB Compass

Default version status: unaffected

  • 0 to < 1.42.2affected

References