CVE Intelligence

Mongo-express Project Mongo-express vulnerabilities

🔔 Create alert RSS Version checker

Published CVEs affecting Mongo-express Project Mongo-express: 1 record(s), with affected versions and fixes.
cpe:2.3:a:mongo-express_project:mongo-express

CVE-2019-10758 Critical · 9.9 KEV Urgent · 70 Public exploit CWE-94 Dec 24, 2019
MongoDB mongo-express Remote Code Execution Vulnerability
mongo-express before 0.54.0 is vulnerable to Remote Code Execution via endpoints that uses the `toBSON` method. A misuse of the `vm` dependency to perform `exec` commands in a non-safe environment.