{"cvss":0.0,"datePublished":"2021-12-10","dateUpdated":"2021-12-10","description":"mongo-express before 0.54.0 is vulnerable to Remote Code Execution via endpoints that uses the `toBSON` method.","dueDate":"2022-06-10","id":"CVE-2019-10758","kev_catalogs":["cisa"],"knownRansomwareCampaignUse":"Unknown","notes":"https://nvd.nist.gov/vuln/detail/CVE-2019-10758","product":"mongo-express","requiredAction":"Apply updates per vendor instructions.","severity":"HIGH","source":"cisa_known_exploited","title":"MongoDB mongo-express Remote Code Execution Vulnerability","vendor":"MongoDB"}