← CVE Intelligence

CVE-2019-10758

n/a / mongo-express PUBLISHED

Description (CNA)

mongo-express before 0.54.0 is vulnerable to Remote Code Execution via endpoints that uses the `toBSON` method. A misuse of the `vm` dependency to perform `exec` commands in a non-safe environment.

Affected (CNA)

Vendor / productVersions
n/a / mongo-expressaffected All versions prior to version 0.54.0

CWE

No CWE identifiers supplied.

References

ADP enrichment

CVE

No English description supplied.

CISA-ADP

No English description supplied.