Lucene search
+L

2 matches found

osv_ghsa
osv_ghsa
•added 2019/12/30 7:30 p.m.•42 views

GHSA-H47J-HC6X-H3QQ Remote Code Execution Vulnerability in NPM mongo-express

Impact Remote code execution on the host machine by any authenticated user. Proof Of Concept Launching mongo-express on a Mac, pasting the following into the "create index" field will pop open the Mac calculator: javascript this.constructor.constructor"return...

9.9CVSS9.4AI score0.84726EPSS
SaveExploits5References9
Github Security Blog
Github Security Blog
•added 2019/12/30 7:30 p.m.•151 views

Remote Code Execution Vulnerability in NPM mongo-express

Impact Remote code execution on the host machine by any authenticated user. Proof Of Concept Launching mongo-express on a Mac, pasting the following into the "create index" field will pop open the Mac calculator: javascript this.constructor.constructor"return...

9.9CVSS9.4AI score0.84726EPSS
SaveExploits5References9Affected Software1
Rows per page
Query Builder