| Package | Affected versions | Patched versions |
|---|---|---|
| mongo-express | = 1.0.2 | |
| mongo-express | ≤ 1.0.2 |
In mongo-express 1.0.2, /admin allows CSRF, as demonstrated by deletion of a Collection.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free