Skip to main content

Improper Input Validation

CVE-2023-32688

High
7.5/10

Summary

The package @parse/push-adapter versions prior to 4.1.3 can crash Parse Server due to an invalid push notification payload. Note: The package name got changed from version 2.0.2 and the old package parse-server-push-adapter has been deprecated.

  • LOW
  • NETWORK
  • NONE
  • UNCHANGED
  • NONE
  • NONE
  • NONE
  • HIGH

CWE-20 - Improper Input Validation

The product receives input or data, but it does not validate or incorrectly validates that the input has the properties that are required to process the data safely and correctly.

References

Advisory Timeline

  • Published