mongo-express Cross-site Request Forgery vulnerability

概要

参考情報

• nvd.nist.gov/vuln/detail/CVE-2023-52555 · ADVISORY
• mongo-express/mongo-express · WEB
• mongo-express/mongo-express · PACKAGE

mongo-express のその他の脆弱性

• CVE-2021-21422中 6.1mongo-express is a web-based MongoDB admin interface, written with Node.js and express. 1: As mentioned in this issue: https://github.com/mo…
• CVE-2020-24391緊急 9.8mongo-express before 1.0.0 offers support for certain advanced syntax but implements this in an unsafe way. NOTE: this may overlap CVE-2019-…
• CVE-2019-10758緊急 9.9悪用確認済み（CISA KEV）mongo-express before 0.54.0 is vulnerable to Remote Code Execution via endpoints that uses the `toBSON` method. A misuse of the `vm` depende…