• caglararli@hotmail.com
  • 05386281520

CVE-2023-52555 | mongo-express 1.0.2 Collection /admin cross-site request forgery (Issue 1338)

Çağlar Arlı      -    13 Views

CVE-2023-52555 | mongo-express 1.0.2 Collection /admin cross-site request forgery (Issue 1338)

A vulnerability, which was classified as problematic, was found in mongo-express 1.0.2. Affected is an unknown function of the file /admin of the component Collection Handler. The manipulation leads to cross-site request forgery. This vulnerability is traded as CVE-2023-52555. It is possible to launch the attack remotely. There is no exploit available.