Lucene search

Parse Server may crash when uploading file without extension

🗓️ 24 Oct 2023 01:17:35Reported by GitHub Advisory DatabaseType

Parse Server crashes on file upload without extension. Permanent fix implemented

Reporter	Title	Published	Views	Family All 10
Prion	Privilege escalation	25 Oct 202318:17	–	prion
Cvelist	CVE-2023-46119 Parse Server may crash when uploading file without extension	25 Oct 202300:03	–	cvelist
CVE	CVE-2023-46119	25 Oct 202318:17	–	cve
NVD	CVE-2023-46119	25 Oct 202318:17	–	nvd
OSV	BIT-parse-2023-46119	6 Mar 202411:00	–	osv
OSV	BIT-2023-46119	2 Nov 202307:24	–	osv
OSV	CVE-2023-46119	25 Oct 202318:17	–	osv
OSV	Parse Server may crash when uploading file without extension	24 Oct 202301:35	–	osv
Veracode	Denial Of Service (DoS)	25 Oct 202307:19	–	veracode
Vulnrichment	CVE-2023-46119 Parse Server may crash when uploading file without extension	25 Oct 202300:03	–	vulnrichment

Vulners

Node

-parse-serverRange6.0.0–6.3.1

-parse-serverRange1.0.0–5.5.6

Source	Link
github	www.github.com/parse-community/parse-server/security/advisories/GHSA-792q-q67h-w579
github	www.github.com/parse-community/parse-server/commit/686a9f282dc23c31beab3d93e6d21ccd0e1328fe
github	www.github.com/parse-community/parse-server/commit/fd86278919556d3682e7e2c856dfccd5beffbfc0
github	www.github.com/parse-community/parse-server/releases/tag/5.5.6
github	www.github.com/parse-community/parse-server/releases/tag/6.3.1
nvd	www.nvd.nist.gov/vuln/detail/CVE-2023-46119
github	www.github.com/advisories/GHSA-792q-q67h-w579

Transform Your Security Services

Elevate your offerings with Vulners' advanced Vulnerability Intelligence. Contact us for a demo and discover the difference comprehensive, actionable intelligence can make in your security strategy.

Book a live demo

24 Oct 2023 01:35Current

6.8Medium risk

Vulners AI Score6.8

CVSS37.5

EPSS0.002

SSVC