CVE-2023-46119 Parse Server may crash when uploading file without extension

🗓️ 25 Oct 2023 00:55:03Reported by GitHub_MType

Parse Server vulnerability patch v5.5.6 and v6.3.

Reporter	Title	Published	Views	Family All 10
Prion	Privilege escalation	25 Oct 202318:17	–	prion
CVE	CVE-2023-46119	25 Oct 202318:17	–	cve
NVD	CVE-2023-46119	25 Oct 202318:17	–	nvd
OSV	BIT-parse-2023-46119	6 Mar 202411:00	–	osv
OSV	BIT-2023-46119	2 Nov 202307:24	–	osv
OSV	CVE-2023-46119	25 Oct 202318:17	–	osv
OSV	Parse Server may crash when uploading file without extension	24 Oct 202301:35	–	osv
Veracode	Denial Of Service (DoS)	25 Oct 202307:19	–	veracode
Github Security Blog	Parse Server may crash when uploading file without extension	24 Oct 202301:35	–	github
Vulnrichment	CVE-2023-46119 Parse Server may crash when uploading file without extension	25 Oct 202300:03	–	vulnrichment

[
  {
    "vendor": "parse-community",
    "product": "parse-server",
    "versions": [
      {
        "version": ">= 1.0.0, < 5.5.6",
        "status": "affected"
      },
      {
        "version": ">= 6.0.0, < 6.3.1",
        "status": "affected"
      }
    ]
  }
]

Source	Link
github	www.github.com/parse-community/parse-server/releases/tag/6.3.1
github	www.github.com/parse-community/parse-server/releases/tag/5.5.6
github	www.github.com/parse-community/parse-server/commit/686a9f282dc23c31beab3d93e6d21ccd0e1328fe
github	www.github.com/parse-community/parse-server/commit/fd86278919556d3682e7e2c856dfccd5beffbfc0
github	www.github.com/parse-community/parse-server/security/advisories/GHSA-792q-q67h-w579

Transform Your Security Services

Elevate your offerings with Vulners' advanced Vulnerability Intelligence. Contact us for a demo and discover the difference comprehensive, actionable intelligence can make in your security strategy.

Book a live demo

25 Oct 2023 00:03Current

7.6High risk

Vulners AI Score7.6

EPSS0.002

CWE-23