Vulnerabilidades de Mongo-express Project

🔔 Criar alerta RSS

CVEs publicadas que afetam produtos de Mongo-express Project: 1 registro(s), com severidade, exploração e correções.

Mongo-express 1

Somente exploradas (KEV) →

CVE-2019-10758 Crítica · 9.9 KEV Alta · 64 Exploit público CWE-94 24/12/2019

MongoDB mongo-express Remote Code Execution Vulnerability

mongo-express before 0.54.0 is vulnerable to Remote Code Execution via endpoints that uses the `toBSON` method. A misuse of the `vm` dependency to perform `exec` commands in a non-safe environment.