{"id":"CVE-2023-46119","aliases":["BIT-parse-2023-46119","GHSA-792q-q67h-w579"],"url":"https://o3.security/vulnerability/CVE-2023-46119","summary":"Parse Server may crash when uploading file without extension","details":"### Impact\n\nParse Server crashes when uploading a file without extension.\n\n### Patches\n\nA permanent fix has been implemented to prevent the server from crashing.\n\n### Workarounds\n\nThere are no known workarounds.\n\n### References\n\n- GitHub security advisory: https://github.com/parse-community/parse-server/security/advisories/GHSA-792q-q67h-w579\n- Patched in Parse Server 6: https://github.com/parse-community/parse-server/releases/tag/6.3.1\n- Patched in Parse Server 5 (LTS): https://github.com/parse-community/parse-server/releases/tag/5.5.6","published":"2023-10-25T00:03:55.774Z","modified":"2026-08-12T03:51:17.313381176Z","cvss":{"score":7.5,"severity":"HIGH","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H"},"epss":null,"cisaKev":null,"exploitsKnown":0,"affectedPackages":[{"ecosystem":"npm","name":"parse-server","fixedVersion":"5.5.6"},{"ecosystem":"npm","name":"parse-server","fixedVersion":"6.3.1"}],"fix":{"url":"https://github.com/parse-community/parse-server/commit/686a9f282dc23c31beab3d93e6d21ccd0e1328fe","label":"parse-community/parse-server@686a9f2"},"references":[{"type":"WEB","url":"https://github.com/parse-community/parse-server/releases/tag/5.5.6"},{"type":"WEB","url":"https://github.com/parse-community/parse-server/releases/tag/6.3.1"},{"type":"ADVISORY","url":"https://github.com/CVEProject/cvelistV5/tree/main/cves/2023/46xxx/CVE-2023-46119.json"},{"type":"ADVISORY","url":"https://github.com/parse-community/parse-server/security/advisories/GHSA-792q-q67h-w579"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2023-46119"},{"type":"FIX","url":"https://github.com/parse-community/parse-server/commit/686a9f282dc23c31beab3d93e6d21ccd0e1328fe"},{"type":"FIX","url":"https://github.com/parse-community/parse-server/commit/fd86278919556d3682e7e2c856dfccd5beffbfc0"},{"type":"PACKAGE","url":"https://github.com/parse-community/parse-server"}],"provenance":{"sources":["OSV.dev","FIRST.org (EPSS)"],"lastVerified":"2026-08-12T03:51:17.313381176Z"}}