CVE-2021-23372

MEDIUM

4.4

CVSS Severity Score

EPSS Score0.1840%

EPSS Percentile0.43th

PublishedApr 13, 2021

Last ModifiedNov 21, 2024

Vulnerability Description

All versions of package mongo-express are vulnerable to Denial of Service (DoS) when exporting an empty collection as CSV, due to an unhandled exception, leading to a crash.

Affected Platforms (CPE)

📦

Mongo Express Project

Mongo Express

All versions

References & Advisories

🔗 https://snyk.io/vuln/SNYK-JS-MONGOEXPRESS-1085403

Related Vulnerabilities

CVE-2019-107589.9

mongo-express before 0.54.0 is vulnerable to Remote Code Execution via endpoints that uses the `toBSON` method. A misuse of the `v...

CVE-2020-243919.8

mongo-express before 1.0.0 offers support for certain advanced syntax but implements this in an unsafe way. NOTE: this may overlap...

CVE-2021-214228.1

mongo-express is a web-based MongoDB admin interface, written with Node.js and express. 1: As mentioned in this issue: https://git...

CVE-2026-121917.8

A vulnerability was found in Comma AI Openpilot 0.11. This issue affects the function pickle.load/pickle.loads of the file selfdri...