CVE-2016-10533

express-restify-mongoose is a module to easily create a flexible REST interface for mongoose models. express-restify-mongoose 2.4.2 and earlier and 3.0.X through 3.0.1 allows a malicious user to send a request for "GET /User?distinct=password" and get all the passwords for all the users in the...

PT-2018-4712

Name of the Vulnerable Software and Affected Versions express-restify-mongoose versions 2.4.2 and earlier express-restify-mongoose versions 3.0.0 through 3.0.1 Description The issue allows a malicious user to send a request for "GET /User?distinct=password" and get all the passwords for all the...

CVE-2016-10533: Exposure of Sensitive Information to an Unauthorized Actor

express-restify-mongoose is a module to easily create a flexible REST interface for mongoose models. express-restify-mongoose 2.4.2 and earlier and 3.0.X through 3.0.1 allows a malicious user to send a request for GET /User?distinct=password and get all the passwords for all the users in the...