express-restify-mongoose

1 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Feed

High —

CVE-2016-10533

Private Data Disclosure in express-restify-mongoose

express-restify-mongoose is a module to easily create a flexible REST interface for mongoose models. express-restify-mongoose 2.4.2 and earlier and 3.0.X through 3.0.1 allows a malicious user to send a request for `GET /User?distinct=password` and get all the…

HackerOne express-restify-mongoose node module express-restify-mongoose npm

May 31, 2018