Vulnerabilidades do Npm Mongo-express

🔔 Criar alerta RSS Verificador de versão

CVEs publicadas que afetam Npm Mongo-express: 1 registro(s), com versões afetadas e correções.

CVE-2019-10758 Crítica · 9.9 KEV Urgente · 70 Exploit público CWE-94 24/12/2019

MongoDB mongo-express Remote Code Execution Vulnerability

mongo-express before 0.54.0 is vulnerable to Remote Code Execution via endpoints that uses the `toBSON` method. A misuse of the `vm` dependency to perform `exec` commands in a non-safe environment.