CVE

CVE-2019-10758

MongoDB mongo-express Remote Code Execution Vulnerability

MongoDB · mongo-express

Date added (CISA)

2021-12-10

Remediation due

2022-06-10

Known ransomware use

Not indicated

Remediation priority

P2 — past CISA due date

Description

mongo-express before 0.54.0 is vulnerable to Remote Code Execution via endpoints that uses the `toBSON` method.