CVE-2024-27298
Parse Server literalizeRegexPart SQL Injection
Summary
Parse Server literalizeRegexPart SQL Injection
Original description
The description as published by the source.
parse-server is a Parse Server for Node.js / Express. This vulnerability allows SQL injection when Parse Server is configured to use the PostgreSQL database. The vulnerability has been fixed in 6.5.0 and 7.0.0-alpha.20.
Source: OSV.dev (Open Source Vulnerabilities) NVD GitHub Advisory OSV
Affected packages
Bitnami
parse
[{"type":"SEMVER","events":[{"introduced":"0"},{"fixed":"6.5.0"}]}]
References
- advisory github.com
- advisory nvd.nist.gov
- advisory github.com
- patch github.com
- patch github.com
- web github.com
- web github.com