{"cvss":0.0,"datePublished":"2020-11-06T00:00:00Z","dateUpdated":"2020-11-06T00:00:00Z","description":"mongo-express before 0.54.0 is vulnerable to Remote Code Execution via endpoints that uses the `toBSON` method.","dueDate":"2022-06-10T00:00:00Z","id":"CVE-2019-10758","kev_catalogs":["vulncheck"],"knownRansomwareCampaignUse":"Unknown","product":"mongo-express","requiredAction":"Apply updates per vendor instructions.","severity":"HIGH","source":"vulncheck_kev","title":"MongoDB mongo-express Remote Code Execution Vulnerability","vendor":"MongoDB"}