GHSA-792q-q67h-w579HighCVSS 7.5

Parse Server may crash when uploading file without extension

Published
October 24, 2023
Last Modified
November 11, 2023

🔗 CVE IDs covered (1)

CVE-2023-46119 →

📋 Description

Impact

Parse Server crashes when uploading a file without extension.

Patches

A permanent fix has been implemented to prevent the server from crashing.

Workarounds

There are no known workarounds.

References

  • GitHub security advisory: https://github.com/parse-community/parse-server/security/advisories/GHSA-792q-q67h-w579
  • Patched in Parse Server 6: https://github.com/parse-community/parse-server/releases/tag/6.3.1
  • Patched in Parse Server 5 (LTS): https://github.com/parse-community/parse-server/releases/tag/5.5.6

🎯 Affected products2

  • npm/parse-server:>= 1.0.0, < 5.5.6
  • npm/parse-server:>= 6.0.0, < 6.3.1

🔗 References (7)