Mongo-express Project vulnerabilities

🔔 Create alert RSS

Published CVEs affecting Mongo-express Project products: 1 record(s), with severity, exploitation and fixes.

Mongo-express 1

Exploited only (KEV) →

CVE-2019-10758 Critical · 9.9 KEV High · 64 Public exploit CWE-94 Dec 24, 2019

MongoDB mongo-express Remote Code Execution Vulnerability

mongo-express before 0.54.0 is vulnerable to Remote Code Execution via endpoints that uses the `toBSON` method. A misuse of the `vm` dependency to perform `exec` commands in a non-safe environment.