express-restify-mongoose node module

1 result · Clear filters · Feed

• High —
  CVE-2016-10533

  Private Data Disclosure in express-restify-mongoose

  express-restify-mongoose is a module to easily create a flexible REST interface for mongoose models. express-restify-mongoose 2.4.2 and earlier and 3.0.X through 3.0.1 allows a malicious user to send a request for `GET /User?distinct=password` and get all the…

  HackerOne express-restify-mongoose node module express-restify-mongoose npm
  May 31, 2018