Parse Server may crash when uploading file without extension(CVE-2023-46119)

概要

Parse Server may crash when uploading file without extension

原文の説明

取得元が公開している説明をそのまま載せています (多くは英語)。

Parse Server is an open source backend that can be deployed to any infrastructure that can run Node.js. Parse Server crashes when uploading a file without extension. This vulnerability has been patched in versions 5.5.6 and 6.3.1.

出典: OSV.dev (Open Source Vulnerabilities) NVD GitHub Advisory OSV

影響パッケージ

Bitnami parse

[{"type":"SEMVER","events":[{"introduced":"1.0.0"},{"fixed":"5.5.6"},{"introduced":"6.0.0"},{"fixed":"6.3.1"}]}]

参照URL

advisory github.com
patch github.com
patch github.com
web github.com
web github.com
web nvd.nist.gov