CVE-2023-46119

—

CVSS 3.1

7.5 high

EPSS

1%p62

Published

Oct 25, 2023 (Oct 25, 2023)

Modified

Jun 17, 2026

Description

Parse Server is an open source backend that can be deployed to any infrastructure that can run Node.js. Parse Server crashes when uploading a file without extension. This vulnerability has been patched in versions 5.5.6 and 6.3.1.

Vendors: parseplatform
Products: parse-server
Weakness: CWE-23, CWE-22
Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

NVD CVE.org GitHub PoCs EPSS (1.1%)

In the news0 stories

No ingested article mentions this CVE yet.