CVE-2024-3371

MEDIUM Year: 2024
CVSS v3 Score
6.8
Medium
Weakness Type
CWE-360
View all →

Vulnerability Description

MongoDB Compass may accept and use insufficiently validated input from an untrusted external source. This may cause unintended application behavior, including data disclosure and enabling attackers to impersonate users. This issue affects MongoDB Compass versions 1.35.0 to 1.42.0.

Related Vulnerabilities

CVE-2017-0911

MEDIUM
CVSS:5.4(Medium)

Twitter Kit for iOS versions 3.0 to 3.2.1 is vulnerable to a callback verification flaw in the "Login with Twitter" component allowing an attacker to provide alternate credentials. In the final step o...

CWE-3602017

CVE-2017-0911

MEDIUM
CVSS:5.4(Medium)

Twitter Kit for iOS versions 3.0 to 3.2.1 is vulnerable to a callback verification flaw in the "Login with Twitter" component allowing an attacker to provide alternate credentials. In the final step o...

CWE-3602017