Alfinj0Se

**Name of the Vulnerable Software and Affected Versions** mongo-express version 1.0.2 **Description** The issue allows for Cross-Site Request Forgery (CSRF) attacks, as demonstrated by the deletion of a Collection through the /admin endpoint. **Recommendations** For mongo-express version 1.0.2, consider restricting access to the /admin endpoint to minimize the risk of exploitation. As a temporary workaround, implement CSRF protection mechanisms until a patch is available.