Description
mongo-express的某些特定版本中存在远程代码执行漏洞。该漏洞是由于checkValid接口对用户输入数据缺乏有效的过滤导致的。
mongo-express CVE-2019-10758 远程代码执行漏洞
PoC
None yet. Search at https://trap.biu.life/?ref=rssReferences
https://nvd.nist.gov/vuln/detail/CVE-2019-10758
https://www.tenable.com/plugins/nessus/200501
https://github.com/vulhub/vulhub/blob/master/mongo-express/CVE-2019-10758/README.md
https://www.endorlabs.com/vulnerability/cve-2019-10758
https://mergebase.com/vulnerability/CVE-2019-10758
https://www.rapid7.com/db/vulnerabilities/mongo-express-cve-2019-10758/
https://security.snyk.io/vuln/SNYK-JS-MONGOEXPRESS-473215
https://www.huaweicloud.com/intl/en-us/notice/20200110161513701.html
https://pocsuite.org/en/guide/poc-demo-cve-2019-10758.html
https://www.fortiguard.com/encyclopedia/ips/49609