CVE-2021-20329

CVE-2021-20329 describes a vulnerability in the MongoDB Go Driver (versions 1.5.0 and earlier) where improper validation of specific cstrings during BSON marshalling of Go objects could allow a malicious user to inject additional fields into documents. This medium-severity vulnerability (CVSS 6.5) has a low attack complexity and requires low privileges, potentially leading to high integrity impact but no confidentiality or availability impact. There is currently no evidence of active exploitation, public exploit code (Metasploit, Nuclei, ExploitDB), or significant community discussion or media coverage surrounding this CVE.