CVE-2019-10758

MongoDB mongo-express Remote Code Execution Vulnerability

Mongo-Express

mongo-express before 0.54.0 is vulnerable to Remote Code Execution via endpoints that uses the `toBSON` method. A misuse of the `vm` dependency to perform `exec` commands in a non-safe environment.

24. Dez 2019

Ausgewertete Quellen

• Hinweis
  https://snyk.io/vuln/SNYK-JS-MONGOEXPRESS-473215
• CISA
  https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2019-10758
• CISA
  MongoDB mongo-express Remote Code Execution Vulnerability
• NVD
  CVE-2019-10758