漏洞描述
Mongo Express 存在未授权访问漏洞，攻击者可利用此漏洞获取数据库敏感信息。
Mongo Express 存在未授权访问漏洞
PoC代码
暂无相关漏洞推荐
- POC CVE-2025-68613: n8n - Remote Code Execution via Expression Injection
- POC MongoDB 存在未授权内存泄露漏洞（CVE-2025-14847）
- MongoDB Zlib 信息泄露漏洞（CVE-2025-14847）
- MongoDB Zlib 压缩协议远程未授权堆内存泄露漏洞(CVE-2025-14847)
- POC CVE-2024-53900: Mongoose < 8.8.3 - Remote Code Execution
- POC CVE-2019-10758: mongo-express Remote Code Execution
- POC CVE-2019-16469: Adobe Experience Manager - Expression Language Injection
- POC CVE-2020-24391: Mongo-Express - Remote Code Execution
- POC CVE-2021-32820: Express-handlebars - Local File Inclusion
- POC CVE-2022-24627: AudioCodes Device Manager Express - SQL Injection
- POC CVE-2024-2876: Wordpress Email Subscribers by Icegram Express - SQL Injection
- POC CVE-2024-36401: GeoServer RCE in Evaluating Property Name Expressions
- POC CVE-2024-4295: Email Subscribers by Icegram Express <= 5.7.20 - Unauthenticated SQL Injection via Hash