En resumen
- CVE-2023-32688 es una vulnerabilidad ALTO (CVSS 7.5) que afecta a parse server push adapter (parseplatform), parse-server-push-adapter.
- Probabilidad de explotación en los próximos 30 días (EPSS): 0.90%, mayor que el 59.7% de las vulnerabilidades.
- Solución: actualizar a 4.1.3 o posterior.
Description
Impact
The Parse Server Push Adapter can crash Parse Server due to an invalid push notification payload.
Patches
Invalid push notification payload is caught and an logged.
Workarounds
n/a
References
NVD description
parse-server-push-adapter is the official Push Notification adapter for Parse Server. The Parse Server Push Adapter can crash Parse Server due to an invalid push notification payload. This issue has been patched in version 4.1.3.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free