cve-2019-10758 mongo-express rce 漏洞分析

下面是對漏洞的描述：javascript mongo-express before 0.54.0 is vulnerable to Remote Code Execution via endpoints that uses the toBSON method. A misuse of the vm dependency to perform exec commands in a non-safe

>>阅读原文<<