PT-2023-29852 · Unknown · Parse Server
CVSS v3.1
7.5
High
| Vector | AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H |
Name of the Vulnerable Software and Affected Versions
Parse Server versions prior to 5.5.6
Parse Server versions prior to 6.3.1
Description
Parse Server crashes when uploading a file without extension. This issue has been patched in versions 5.5.6 and 6.3.1.
Recommendations
For versions prior to 5.5.6, update to version 5.5.6 to resolve the issue.
For versions prior to 6.3.1, update to version 6.3.1 to resolve the issue.
Exploit
Fix
Relative Path Traversal
Path traversal
Found an issue in the description? Have something to add? Feel free to write us 👾
Related Identifiers
Affected Products
Parse Server