En bref
- CVE-2023-32688 est une vulnérabilité ÉLEVÉE (CVSS 7.5) touchant parse server push adapter (parseplatform), parse-server-push-adapter.
- Probabilité d'exploitation dans les 30 prochains jours (EPSS) : 0.90%, plus élevée que 59.7% des vulnérabilités.
- Correctif : mettre à jour vers 4.1.3 ou plus récent.
Description
Impact
The Parse Server Push Adapter can crash Parse Server due to an invalid push notification payload.
Patches
Invalid push notification payload is caught and an logged.
Workarounds
n/a
References
NVD description
parse-server-push-adapter is the official Push Notification adapter for Parse Server. The Parse Server Push Adapter can crash Parse Server due to an invalid push notification payload. This issue has been patched in version 4.1.3.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free