Mongo-express vulnerabilities
We track 1 vulnerability in Mongo-express products. 1 is rated high or critical, and 1 has been exploited in real attacks. The most recent was published on December 24, 2019.
1vulnerabilities
1critical
0high
1exploited
9.9average CVSS score
Latest Mongo-express vulnerabilities
- 9.9 Critical severity
MongoDB mongo-express Remote Code Execution Exploited
mongo-express before 0.54.0 is vulnerable to Remote Code Execution via endpoints that uses the `toBSON` method. A misuse of the `vm` dependency to perform `exec` commands in a non-safe environment.