Parse Server may crash when uploading file without extension
Parse Server is an open source backend that can be deployed to any infrastructure that can run Node.js. Parse Server crashes when uploading a file without extension. This vulnerability has been patched in versions 5.5.6 and 6.3.1.
01
describes (1)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2023-46119US | high7.5 | — | ||
Parse Server is an open source backend that can be deployed to any infrastructure that can run Node.js. Parse Server crashes when uploading a file without extension. This vulnerabi… | ||||
02
references
External citations — patches, advisories, analysis.
- https://github.com/parse-community/parse-server/commit/686a9f282dc23c31beab3d93e6d21ccd0e1328feFIX
- https://github.com/parse-community/parse-server/commit/fd86278919556d3682e7e2c856dfccd5beffbfc0FIX
- https://github.com/parse-community/parse-server/releases/tag/5.5.6ARTICLE
- https://github.com/parse-community/parse-server/releases/tag/6.3.1ARTICLE
- https://github.com/parse-community/parse-server/security/advisories/GHSA-792q-q67h-w579ADVISORY
- https://nvd.nist.gov/vuln/detail/CVE-2023-46119WEB
scry
Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.
Free scan