CVE-2024-27298
Parse Server literalizeRegexPart SQL Injection
Résumé
Parse Server literalizeRegexPart SQL Injection
Description d'origine
La description telle que publiée par la source (souvent en anglais).
parse-server is a Parse Server for Node.js / Express. This vulnerability allows SQL injection when Parse Server is configured to use the PostgreSQL database. The vulnerability has been fixed in 6.5.0 and 7.0.0-alpha.20.
Source: OSV.dev (Open Source Vulnerabilities) NVD GitHub Advisory OSV
Paquets affectés
Bitnami
parse
[{"type":"SEMVER","events":[{"introduced":"0"},{"fixed":"6.5.0"}]}]
Références
- advisory github.com
- advisory nvd.nist.gov
- advisory github.com
- patch github.com
- patch github.com
- web github.com
- web github.com