Lucene search
+L

2 matches found

OSV
OSV
•added 2019/12/30 7:30 p.m.•36 views

GHSA-H47J-HC6X-H3QQ Remote Code Execution Vulnerability in NPM mongo-express

Impact Remote code execution on the host machine by any authenticated user. Proof Of Concept Launching mongo-express on a Mac, pasting the following into the "create index" field will pop open the Mac calculator: javascript this.constructor.constructor"return...

9.9CVSS9.4AI score0.84726EPSS
SaveExploits3References9
Github Security Blog
Github Security Blog
•added 2019/12/30 7:30 p.m.•144 views

Remote Code Execution Vulnerability in NPM mongo-express

Impact Remote code execution on the host machine by any authenticated user. Proof Of Concept Launching mongo-express on a Mac, pasting the following into the "create index" field will pop open the Mac calculator: javascript this.constructor.constructor"return...

9.9CVSS9.4AI score0.84726EPSS
SaveExploits3References9Affected Software1
Rows per page
Query Builder