CyberRota Analysis
AI-GeneratedThe MongoDB Go Driver's Client.BulkWrite API is vulnerable to improper handling of caller-supplied database names, allowing untrusted input to include reserved separator characters. This flaw can lead to unintended write operations on incorrect databases and collections, posing a risk of data corruption or loss. Organizations using the MongoDB Go Driver should prioritize patching this vulnerability to safeguard against potential exploitation.
Original NVD Description
The MongoDB Go Driver's client-level bulk write operation may accept a caller-supplied database name containing a reserved separator character without escaping it before the name is used to build the target namespace for the operation. An application that passes untrusted input as a database name could therefore have the write directed at a database and collection other than the ones it intended. Only the Client.BulkWrite API is affected.