CVE-2019-10758 · Sandworm Watch

Dec 10, 2021high

CVE-2019-10758: MongoDB mongo-express Remote Code Execution Vulnerability

mongo-express before 0.54.0 is vulnerable to Remote Code Execution via endpoints that uses the `toBSON` method. Required action: Apply updates per vendor instructions.

CVE-2019-10758EPSS 84.8%MongoDBmongo-express

CISA KEV ↗ · unattributed attribution