{"resultsPerPage":1,"startIndex":0,"totalResults":1,"format":"NVD_CVE","version":"2.0","timestamp":"2026-08-01T02:43:10.967","vulnerabilities":[{"cve":{"id":"CVE-2024-3371","sourceIdentifier":"cna@mongodb.com","published":"2024-04-24T17:15:47.230","lastModified":"2026-06-17T07:44:09.043","vulnStatus":"Analyzed","cveTags":[],"descriptions":[{"lang":"en","value":"MongoDB Compass may accept and use insufficiently validated input from an untrusted external source. This may cause unintended application behavior, including data disclosure and enabling attackers to impersonate users. This issue affects MongoDB Compass versions 1.35.0 to 1.42.0.\n"},{"lang":"es","value":"MongoDB Compass puede aceptar y utilizar entradas no suficientemente validadas de una fuente externa que no sea de confianza. Esto puede provocar un comportamiento no deseado de la aplicación, incluida la divulgación de datos y permitir que los atacantes se hagan pasar por usuarios. Este problema afecta a las versiones 1.35.0 a 1.40.5 de MongoDB Compass."}],"affected":[{"source":"cna@mongodb.com","affectedData":[{"vendor":"MongoDB Inc","product":"MongoDB Compass","defaultStatus":"unaffected","cpes":["cpe:2.3:a:mongodb:compass:1.35.0:*:*:*:*:*:*:*","cpe:2.3:a:mongodb:compass:1.36.0:*:*:*:*:*:*:*","cpe:2.3:a:mongodb:compass:1.36.2:*:*:*:*:*:*:*","cpe:2.3:a:mongodb:compass:1.36.3:*:*:*:*:*:*:*","cpe:2.3:a:mongodb:compass:1.36.4:*:*:*:*:*:*:*","cpe:2.3:a:mongodb:compass:1.37.0:*:*:*:*:*:*:*","cpe:2.3:a:mongodb:compass:1.38.0:*:*:*:*:*:*:*","cpe:2.3:a:mongodb:compass:1.38.1:*:*:*:*:*:*:*","cpe:2.3:a:mongodb:compass:1.38.2:*:*:*:*:*:*:*","cpe:2.3:a:mongodb:compass:1.39.0:*:*:*:*:*:*:*","cpe:2.3:a:mongodb:compass:1.39.1:*:*:*:*:*:*:*","cpe:2.3:a:mongodb:compass:1.39.2:*:*:*:*:*:*:*","cpe:2.3:a:mongodb:compass:1.39.3:*:*:*:*:*:*:*","cpe:2.3:a:mongodb:compass:1.39.4:*:*:*:*:*:*:*","cpe:2.3:a:mongodb:compass:1.40.0:*:*:*:*:*:*:*","cpe:2.3:a:mongodb:compass:1.40.1:*:*:*:*:*:*:*","cpe:2.3:a:mongodb:compass:1.40.2:*:*:*:*:*:*:*","cpe:2.3:a:mongodb:compass:1.40.3:*:*:*:*:*:*:*","cpe:2.3:a:mongodb:compass:1.40.4:*:*:*:*:*:*:*","cpe:2.3:a:mongodb:compass:1.42.0:*:*:*:*:*:*:*"],"versions":[{"version":"1.35.0","lessThanOrEqual":"1.42.0","versionType":"custom","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"cna@mongodb.com","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:L","baseScore":7.1,"baseSeverity":"HIGH","attackVector":"NETWORK","attackComplexity":"HIGH","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"LOW"},"exploitabilityScore":1.6,"impactScore":5.5},{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:N","baseScore":6.8,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"HIGH","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"NONE"},"exploitabilityScore":1.6,"impactScore":5.2}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2024-08-07T15:29:36.154092Z","id":"CVE-2024-3371","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"total"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"cna@mongodb.com","type":"Secondary","description":[{"lang":"en","value":"CWE-360"}]},{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:mongodb:compass:*:*:*:*:*:*:*:*","versionStartIncluding":"1.35.0","versionEndExcluding":"1.42.1","matchCriteriaId":"F6E151AA-FB8D-43A3-8F2A-6B822FE540DC"}]}]}],"references":[{"url":"https://jira.mongodb.org/browse/COMPASS-7260","source":"cna@mongodb.com","tags":["Vendor Advisory"]},{"url":"https://jira.mongodb.org/browse/COMPASS-7260","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}}]}