In addition to Weibo, there is also WeChat
Please pay attention
WeChat public account
Shulou
2025-04-09 Update From: SLTechnology News&Howtos shulou NAV: SLTechnology News&Howtos > Internet Technology >
Share
Shulou(Shulou.com)06/01 Report--
This article will explain in detail how to carry out mongo-express remote code execution vulnerability risk tips, the content of the article is of high quality, so the editor will share it with you for reference. I hope you will have a certain understanding of the relevant knowledge after reading this article.
0x00 vulnerability background
On January 3, 2020, 360CERT detected that mongo-express officially issued a CVE-2019-10758 vulnerability warning with a high vulnerability level.
At present, the number of users of mongo-express should be relatively large in the MongoDB admin management interface on Github.
360CERT judges that the vulnerability level is high and the hazard / impact area is large. It is recommended that mongo-express users install the latest patches in time to avoid hacker attacks.
0x01 vulnerability details
The affected version of this package is vulnerable to remote code execution (RCE) attacks through endpoints that use the toBSON method. Abuse the vm dependency to execute exec commands in an insecure environment. The default user name is admin and the password is pass
0x02 affects version
Mongo-express, versions prior to 0.54.0
0x03 repair recommendation
Upgrade mongo-express to 0.54.0 or later.
On how to carry out mongo-express remote code execution vulnerability risk tips to share here, I hope the above content can be of some help to you, can learn more knowledge. If you think the article is good, you can share it for more people to see.
Welcome to subscribe "Shulou Technology Information " to get latest news, interesting things and hot topics in the IT industry, and controls the hottest and latest Internet news, technology news and IT industry trends.
Views: 0
*The comments in the above article only represent the author's personal views and do not represent the views and positions of this website. If you have more insights, please feel free to contribute and share.
Continue with the installation of the previous hadoop.First, install zookooper1. Decompress zookoope
"Every 5-10 years, there's a rare product, a really special, very unusual product that's the most un
© 2024 shulou.com SLNews company. All rights reserved.