GHSA-c9qr-rh56-vvrc
CVE Information
Impact
Passing untrusted input as part of a database or collection name may result in targeting a different database or collection than specified.
Patches
Fixed in C driver 2.5.1.
Workarounds
Validate database and collection names prior to passing into APIs.
References
https://jira.mongodb.org/browse/CDRIVER-6424