CVE-2023-46119CWE-23

Parse Server may crash when uploading file without extension

High · published October 25, 2023

CVSS v3.1
7.5
EPSS
1%
Percentile
64.1
In the wild
Unconfirmed
What it is

Parse Server is an open source backend that can be deployed to any infrastructure that can run Node.js. Parse Server crashes when uploading a file without extension. This vulnerability has been patched in versions 5.5.6 and 6.3.1.

The record
Technical detail
CVSS v3.1
7.5 · HIGH
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
CVSS v4.0
Not supplied
EPSS
0.01053 · 64.1th percentile
Weakness
CWE-23 · Relative Path Traversal
Published
2023-10-25T00:03Z
EPSS history
Timeline
  • 25 OCT 00:03Z
    Parse Server may crash when uploading file without extension
    cvelistv5