CVE-2022-41878

🗓️ 10 Nov 2022 00:00:00Reported by GitHub_MType

cve🔗 web.nvd.nist.gov📰️ 6 Media mentions👁 78 Views

Parse Server allows injection of keywords via Cloud Code Webhooks or Triggers, fixed in v4.10.19 and v5.3.2

Reporter	Title	Published	Views	Family All 15
CNNVD	Parse Server 安全漏洞	10 Nov 202200:00	–	cnnvd
Cvelist	CVE-2022-41878 Parse Server Prototype pollution and Injection via Cloud Code Webhooks or Cloud Code Triggers	10 Nov 202200:00	–	cvelist
EUVD	EUVD-2022-7465	3 Oct 202520:07	–	euvd
Github Security Blog	Parse Server vulnerable to Prototype Pollution via Cloud Code Webhooks or Cloud Code Triggers	9 Nov 202220:47	–	github
NVD	CVE-2022-41878	10 Nov 202223:15	–	nvd
OSV	BIT-PARSE-2022-41878 Parse Server Prototype pollution and Injection via Cloud Code Webhooks or Cloud Code Triggers	6 Mar 202411:01	–	osv
OSV	CVE-2022-41878 Parse Server Prototype pollution and Injection via Cloud Code Webhooks or Cloud Code Triggers	10 Nov 202200:00	–	osv
OSV	GHSA-XPRV-WVH7-QQQX Parse Server vulnerable to Prototype Pollution via Cloud Code Webhooks or Cloud Code Triggers	9 Nov 202220:47	–	osv
Prion	Design/Logic Flaw	10 Nov 202223:15	–	prion
Positive Technologies	PT-2022-26110	9 Nov 202200:00	–	ptsecurity

NVD

Vulners

Node

parseplatform parse-serverRange<4.10.19node.js

parseplatform parse-serverRange5.0.0–5.3.2node.js

[
  {
    "vendor": "parse-community",
    "product": "parse-server",
    "versions": [
      {
        "version": "< 4.10.19",
        "status": "affected"
      }
    ]
  }
]