CVE-2023-32688

Опубликовано: 27 мая 2023

Источник: nvd

CVSS3: 4.9

CVSS3: 7.5

EPSS Низкий

Описание

parse-server-push-adapter is the official Push Notification adapter for Parse Server. The Parse Server Push Adapter can crash Parse Server due to an invalid push notification payload. This issue has been patched in version 4.1.3.

Ссылки

https://github.com/parse-community/parse-server-push-adapter/pull/217
Patch
https://github.com/parse-community/parse-server-push-adapter/releases/tag/4.1.3
Release Notes
https://github.com/parse-community/parse-server-push-adapter/security/advisories/GHSA-mxhg-rvwx-x993
Patch
Vendor Advisory
https://github.com/parse-community/parse-server-push-adapter/pull/217
Patch
https://github.com/parse-community/parse-server-push-adapter/releases/tag/4.1.3
Release Notes
https://github.com/parse-community/parse-server-push-adapter/security/advisories/GHSA-mxhg-rvwx-x993
Patch
Vendor Advisory

Уязвимые конфигурации

Конфигурация 1

cpe:2.3:a:parseplatform:parse_server_push_adapter:*:*:*:*:*:node.js:*:*

Версия до 4.1.3 (исключая)

EPSS

Процентиль: 36%

0.00152

Низкий

4.9 Medium

CVSS3

7.5 High

CVSS3

Дефекты

CWE-20

Связанные уязвимости

GHSA-mxhg-rvwx-x993

CVSS3: 4.9

github

больше 2 лет назад

Invalid push request payload crashes Parse Server

EPSS

Процентиль: 36%

0.00152

Низкий

4.9 Medium

CVSS3

7.5 High

CVSS3

Дефекты

CWE-20