Security Advisory
CVE-2019-10758
9.9
CRITICAL
Vulnerability Description
mongo-express before 0.54.0 is vulnerable to Remote Code Execution via endpoints that uses the `toBSON` method. A misuse of the `vm` dependency to perform `exec` commands in a non-safe environment.
Published Date
December 24, 2019
Official Source
NIST NVD Advisory