admin/GobyVuls
1
0
Fork 0
mirror of https://github.com/gobysec/GobyVuls.git synced 2025-12-30 13:57:52 +00:00
Code Issues Packages Projects Releases Wiki Activity
GobyVuls/Mongo-Express/CVE-2019-10758
History
tardc 2ec50146b0 Add CVE-2019-10758
2020-04-28 12:31:55 +08:00
..
CVE-2019-10758.gif
Add CVE-2019-10758
2020-04-28 12:31:55 +08:00
README.md
Add CVE-2019-10758
2020-04-28 12:31:55 +08:00

README.md

CVE-2019-10758 Mongo Express Remote Code Execution Vulnerability

Mongo Express before 0.54.0 is vulnerable to Remote Code Execution via endpoints that uses the toBSON method. A misuse of the vm dependency to perform exec commands in a non-safe environment.

Affected version: mongo-express < 0.54.0

FOFA query rule: title="Mongo Express"

Demo