GitHub Advisory DatabaseGHSA-MXHG-RVWX-X993Invalid push request payload crashes Parse Server
7.5 High
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
0.003 Low
EPSS
Percentile
69.3%
Impact
The Parse Server Push Adapter can crash Parse Server due to an invalid push notification payload.
Patches
Invalid push notification payload is caught and an logged.
Workarounds
n/a
References
Affected configurations
| CPE | Name | Operator | Version |
|---|---|---|---|
| parse-server-push-adapter | lt | 4.1.3 |
References
github.com/advisories/GHSA-mxhg-rvwx-x993
github.com/parse-community/parse-server-push-adapter/commit/598cb84d0866b7c5850ca96af920e8cb5ba243ec
github.com/parse-community/parse-server-push-adapter/pull/217
github.com/parse-community/parse-server-push-adapter/releases/tag/4.1.3
github.com/parse-community/parse-server-push-adapter/security/advisories/GHSA-mxhg-rvwx-x993
nvd.nist.gov/vuln/detail/CVE-2023-32688
Related
7.5 High
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
0.003 Low
EPSS
Percentile
69.3%