Lucene search

K
cvelistMongodbCVELIST:CVE-2019-2391
HistoryMar 31, 2020 - 1:25 p.m.

CVE-2019-2391 JS-bson may incorrectly serialise some requests

2020-03-3113:25:12
CWE-502
mongodb
raw.githubusercontent.com
2

5.4 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

22.0%

Incorrect parsing of certain JSON input may result in js-bson not correctly serializing BSON. This may cause unexpected application behaviour including data disclosure. This issue affects: MongoDB Inc. js-bson library version 1.1.3 and prior to.

5.4 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

22.0%