{"id":"EUVD-2025-34070","enisaUuid":"598760d3-9992-3863-a515-c9df2a34d5e4","description":"When tlsInsecure\u003dFalse appears in a connection string, certificate validation is disabled.\n\nThis vulnerability affects MongoDB Rust Driver versions prior to v3.2.5","datePublished":"Oct 13, 2025, 4:22:57 PM","dateUpdated":"Feb 26, 2026, 5:47:45 PM","baseScore":8.0,"baseScoreVersion":"3.1","baseScoreVector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:N","references":"https://jira.mongodb.org/browse/RUST-2264\n","aliases":"CVE-2025-11695\nGHSA-3p6w-gv5g-xjw9\n","assigner":"mongodb","epss":0.18,"enisaIdProduct":[{"id":"1f31647f-0681-31bf-8501-3ba3b3664c10","product":{"name":"Rust Driver","vendor":{"name":"MONGODB"}},"product_version":"0 \u003cv3.2.5"}],"enisaIdVendor":[{"id":"d39ae891-0952-30fe-a1ea-c383efbc4d89","vendor":{"name":"MONGODB"}}],"enisaIdVulnerability":[{"id":"0a277c34-bf6d-328d-975a-e1020da7d16d","vulnerability":{"id":"GHSA-3p6w-gv5g-xjw9","description":"MongoDB Rust Driver has certificate validation disabled when `tlsInsecure\u003dFalse` appears in connection string","datePublished":"Oct 13, 2025, 6:31:13 PM","dateUpdated":"Oct 13, 2025, 8:38:21 PM","baseScore":0.0,"references":"https://nvd.nist.gov/vuln/detail/CVE-2025-11695\nhttps://github.com/mongodb/mongo-rust-driver/pull/1453\nhttps://github.com/mongodb/mongo-rust-driver/commit/21ed6aeeea386628621b36a6af2a1a248cc87dcf\nhttps://github.com/mongodb/mongo-rust-driver/commit/b918cd6676331c45f26dd1acd13e230aaf17fe6d\nhttps://github.com/mongodb/mongo-rust-driver\nhttps://jira.mongodb.org/browse/RUST-2264\n","enisa_id":"EUVD-2025-34070\n","aliases":"GHSA-3p6w-gv5g-xjw9\nCVE-2025-11695\n","epss":0.0,"dataProcessed":"Oct 25, 2026, 1:51:14 AM","vulnerabilityProduct":[],"vulnerabilityVendor":[]}},{"id":"6e33e7b7-0749-3a60-86d5-f9e6d8118b48","vulnerability":{"id":"CVE-2025-11695","description":"When tlsInsecure\u003dFalse appears in a connection string, certificate validation is disabled.\n\nThis vulnerability affects MongoDB Rust Driver versions prior to v3.2.5","datePublished":"Oct 13, 2025, 4:22:57 PM","dateUpdated":"Feb 26, 2026, 5:47:45 PM","status":"PUBLISHED","baseScore":8.0,"baseScoreVersion":"3.1","baseScoreVector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:N","references":"https://jira.mongodb.org/browse/RUST-2264\n","enisa_id":"EUVD-2025-34070\n","assigner":"mongodb","epss":0.18,"dataProcessed":"Oct 31, 2026, 7:16:09 AM","vulnerabilityProduct":[{"id":"0ea482a5-2487-344e-9723-1956ba1de6e4","product":{"name":"Rust Driver","vendor":{"name":"MONGODB"}},"product_version":"0 \u003cv3.2.5"}],"vulnerabilityVendor":[{"id":"cafd93b4-2544-3000-ac44-3b72971af02f","vendor":{"name":"MONGODB"}}]}}],"enisaIdAdvisory":[]}