Lucene search
+L

2 matches found

OSV
OSV
added 2019/12/30 7:30 p.m.30 views

GHSA-H47J-HC6X-H3QQ Remote Code Execution Vulnerability in NPM mongo-express

Impact Remote code execution on the host machine by any authenticated user. Proof Of Concept Launching mongo-express on a Mac, pasting the following into the "create index" field will pop open the Mac calculator: javascript this.constructor.constructor"return...

9.9CVSS9.4AI score0.84845EPSS
SaveExploits3References9
Github Security Blog
Github Security Blog
added 2019/12/30 7:30 p.m.139 views

Remote Code Execution Vulnerability in NPM mongo-express

Impact Remote code execution on the host machine by any authenticated user. Proof Of Concept Launching mongo-express on a Mac, pasting the following into the "create index" field will pop open the Mac calculator: javascript this.constructor.constructor"return...

9.9CVSS9.4AI score0.84845EPSS
SaveExploits3References9Affected Software1
Rows per page
Query Builder