Description

Parse Server is an open source backend that can be deployed to any infrastructure that can run Node.js. A vulnerability in versions prior to 6.5.7 and 7.1.0 allows SQL injection when Parse Server is configured to use the PostgreSQL database. The algorithm to detect SQL injection has been improved in versions 6.5.7 and 7.1.0. No known workarounds are available.

INFO

Published Date :

2024-07-01T21:15:26.242Z

Last Modified :

2024-08-02T04:19:20.712Z

Source :

GitHub_M
AFFECTED PRODUCTS

The following products are affected by CVE-2024-39309 vulnerability.

Vendors Products
Parse Community
  • Parse Server
REFERENCES

Here, you will find a curated list of external links that provide in-depth information to CVE-2024-39309.

URL Resource
https://github.com/parse-community/parse-server/commit/2edf1e4c0363af01e97a7fbc97694f851b7d1ff3 cve-icon cve-icon
https://github.com/parse-community/parse-server/commit/f332d54577608c5ad927255e06d8c694e2e0ff5b cve-icon cve-icon
https://github.com/parse-community/parse-server/pull/9167 cve-icon cve-icon
https://github.com/parse-community/parse-server/pull/9168 cve-icon cve-icon
https://github.com/parse-community/parse-server/security/advisories/GHSA-c2hr-cqg6-8j6r cve-icon cve-icon
Login to claim this CVE

CVSS Vulnerability Scoring System

Detailed values of each vector for above chart.
Attack Vector
Attack Complexity
Privileges Required
User Interaction
Scope
Confidentiality Impact
Integrity Impact
Availability Impact