Lucene search

K
osvGoogleOSV:CVE-2019-10758
HistoryDec 24, 2019 - 10:15 p.m.

CVE-2019-10758

2019-12-2422:15:11
Google
osv.dev
10

9.7 High

AI Score

Confidence

High

0.975 High

EPSS

Percentile

100.0%

mongo-express before 0.54.0 is vulnerable to Remote Code Execution via endpoints that uses the toBSON method. A misuse of the vm dependency to perform exec commands in a non-safe environment.

9.7 High

AI Score

Confidence

High

0.975 High

EPSS

Percentile

100.0%