2024-03-01 00:00:00
mitre
PUBLISHED
In mongo-express 1.0.2, /admin allows CSRF, as demonstrated by deletion of a Collection.