Lucene search

K
cvelistMitreCVELIST:CVE-2020-24391
HistoryMar 30, 2021 - 8:52 p.m.

CVE-2020-24391

2021-03-3020:52:58
mitre
www.cve.org
2
mongo-express
unsafe implementation
syntax

AI Score

9.5

Confidence

High

EPSS

0.479

Percentile

97.5%

mongo-express before 1.0.0 offers support for certain advanced syntax but implements this in an unsafe way. NOTE: this may overlap CVE-2019-10769.

AI Score

9.5

Confidence

High

EPSS

0.479

Percentile

97.5%