- Description
- Mongoose before 8.8.3 can improperly use $where in match, leading to search injection.
- Source
- cve@mitre.org
- NVD status
- Received
CVSS 3.1
- Type
- Secondary
- Base score
- 9.1
- Impact score
- 5.2
- Exploitability score
- 3.9
- Vector string
- CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N
- Severity
- CRITICAL
- 134c704f-9b21-4f2e-91b3-4a467353bcc0
- CWE-89
- Hype score
- Not currently trending
تشكل مكتبة 'Mongoose' للODM من MogoDB تهديدات خطيرة عند انكشافها، مثل الوصول غير المصرح به، استخراج البيانات وتنفيذ التعليمات عن بُعد. الفحوصات الأمنية المستمرة مع CTI و ASM وكيفية منع استغلال CVE-2024-53900 و CVE-2025-23061: https://t.co/ITcv81mufe https://t.co/aokc6hXiLn
@CriminalIP_AR
21 Mar 2025
38 Impressions
0 Retweets
1 Like
1 Bookmark
0 Replies
0 Quotes
MongooseのRCE脆弱性「CVE-2024-53900」&「CVE-2025-23061」 MongoDBのODMライブラリである「Mongoose」は、外部に公開されると、無認証アクセス、データ流出、リモートコード実行など、深刻なセキュリティの脅威を引き起こします。 https://t.co/UjmRYzZVs3
@CriminalIP_JP
21 Mar 2025
110 Impressions
0 Retweets
1 Like
1 Bookmark
0 Replies
0 Quotes
몽구스 RCE 취약점 CVE-2024-53900 & CVE-2025-23061 MongoDB의 ODM 라이브러리 '몽구스'는 외부 노출 시 무인증 접근, 데이터 유출, 원격 코드 실행 등 심각한 보안 위협을 야기합니다. CTI와 ASM을 통한 지속적인 보안 상태 점검과 보안 공격 예방법을 확인해보세요: https://t.co/Tbl6kf4wW4 https://t.co/G7w2V3Suey
@CriminalIP_KR
21 Mar 2025
73 Impressions
0 Retweets
1 Like
0 Bookmarks
0 Replies
0 Quotes
Mongoose RCE Vulnerabilities: CVE-2024-53900 & CVE-2025-23061 The Mongoose ODM library for MongoDB creates significant security risks when exposed, enabling unauthenticated access, data leakage, and remote code execution. Learn more about proactive security checks and how to
@CriminalIP_US
20 Mar 2025
85 Impressions
0 Retweets
1 Like
0 Bookmarks
0 Replies
0 Quotes
🟡Critical MongoDB Vulnerabilities Two severe flaws (CVE-2024-53900 & CVE-2025-23061) in the Mongoose library enable data theft & remote code execution. Patch immediately to v8.9.5. Unpatched systems remain at risk. 🔗https://t.co/lmI3WLb7K1 #CyberSecurity #MongoDB #I
@Osec__
5 Mar 2025
13 Impressions
0 Retweets
0 Likes
0 Bookmarks
0 Replies
0 Quotes
Actively exploited CVE : CVE-2024-53900
@transilienceai
26 Feb 2025
22 Impressions
0 Retweets
0 Likes
0 Bookmarks
1 Reply
0 Quotes
Actively exploited CVE : CVE-2024-53900
@transilienceai
26 Feb 2025
9 Impressions
0 Retweets
0 Likes
0 Bookmarks
1 Reply
0 Quotes
Actively exploited CVE : CVE-2024-53900
@transilienceai
25 Feb 2025
10 Impressions
0 Retweets
0 Likes
0 Bookmarks
1 Reply
0 Quotes
Actively exploited CVE : CVE-2024-53900
@transilienceai
24 Feb 2025
9 Impressions
0 Retweets
0 Likes
0 Bookmarks
1 Reply
0 Quotes
Actively exploited CVE : CVE-2024-53900
@transilienceai
22 Feb 2025
15 Impressions
0 Retweets
0 Likes
0 Bookmarks
1 Reply
0 Quotes
Actively exploited CVE : CVE-2024-53900
@transilienceai
22 Feb 2025
15 Impressions
0 Retweets
0 Likes
0 Bookmarks
1 Reply
0 Quotes
Critical vulnerabilities (CVE-2024-53900, CVE-2025-23061) found in Mongoose ODM can lead to data theft and RCE for MongoDB apps. Patches released, upgrades recommended. ⚠️🔒 #MongoDB #DataSecurity #USA link: https://t.co/WhUM0A40IJ https://t.co/EaWm2TDd2k
@TweetThreatNews
21 Feb 2025
18 Impressions
0 Retweets
1 Like
0 Bookmarks
0 Replies
0 Quotes
⚠️ Vulnerability Alert: Critical Flaws in Mongoose Library Expose MongoDB to Data Theft and Code Execution 📅 Timeline: Disclosure: 2024-11-01 Patch: 2025-02-20 📌 Attribution: Identified by security researcher Dat Phung. 🆔 cveId: CVE-2024-53900 📊 baseScore: 9.1 📏… https:
@syedaquib77
21 Feb 2025
32 Impressions
0 Retweets
0 Likes
0 Bookmarks
1 Reply
0 Quotes
CVE-2024-53900とCVE-2025-23061、めちゃくちゃ既視感がある 具体的に言えばTSG CTF 2023
@st98_
26 Jan 2025
1567 Impressions
0 Retweets
17 Likes
8 Bookmarks
0 Replies
1 Quote
Threat Alert: Critical MongoDB Vulnerability: Search Injection Flaw Affects Millions of Apps CVE-2025-23061 CVE-2024-53900 Severity: 🔴 High Maturity: 🧨 Trending Learn more: https://t.co/tShbo0HeUj #CyberSecurity #ThreatIntel #InfoSec
@fletch_ai
22 Jan 2025
17 Impressions
0 Retweets
0 Likes
0 Bookmarks
0 Replies
0 Quotes
CVE-2024-53900 Mongoose before 8.8.3 can improperly use $where in match. https://t.co/lKMvwSgY0B
@CVEnew
2 Dec 2024
460 Impressions
0 Retweets
0 Likes
0 Bookmarks
0 Replies
0 Quotes