CVE Intelligence

Vulnerabilidades do Mongo-express Project Mongo-express

🔔 Criar alerta RSS Verificador de versão

CVEs publicadas que afetam Mongo-express Project Mongo-express: 1 registro(s), com versões afetadas e correções.
cpe:2.3:a:mongo-express_project:mongo-express

CVE-2019-10758 Crítica · 9.9 KEV Urgente · 70 Exploit público CWE-94 24/12/2019
MongoDB mongo-express Remote Code Execution Vulnerability
mongo-express before 0.54.0 is vulnerable to Remote Code Execution via endpoints that uses the `toBSON` method. A misuse of the `vm` dependency to perform `exec` commands in a non-safe environment.