mongo-express 跨站脚本漏洞

漏洞信息详情

mongo-express是一款用于交互式管理MongoDB数据库的、基于Web的轻量级管理界面。

Mongo-express存在安全漏洞，该漏洞源于未经授权的用户可以发送大量数据。

目前厂商已发布升级补丁以修复漏洞，补丁获取链接：

https://github.com/mongo-express/mongo-express/security/advisories/GHSA-7p8h-86p5-wv3p

来源:CONFIRM

链接:https://github.com/mongo-express/mongo-express/security/advisories/GHSA-7p8h-86p5-wv3p

来源:MISC

链接:https://github.com/mongo-express/mongo-express/commit/f5e0d4931f856f032f22664b5e5901d5950cfd4b

来源:MISC

链接:https://github.com/mongo-express/mongo-express/issues/577

来源:www.cybersecurity-help.cz

链接:https://www.cybersecurity-help.cz/vdb/SB2021062811

来源:vigilance.fr

链接:https://vigilance.fr/vulnerability/Node-js-mongo-express-Cross-Site-Scripting-35788

暂无