CVSS 3.1
7.5 highCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:HCVE-2023-32688
High (7.5) in parseplatform parse server push adapter. EPSS 0.9% chance of exploitation in the next 30 days. Fixed in parse-server-push-adapter 4.1.3.
parse-server-push-adapter is the official Push Notification adapter for Parse Server. The Parse Server Push Adapter can crash Parse Server due to an invalid push notification payload. This issue has been patched in version 4.1.3.
Severity
- EPSS
- 0.9% chance of exploitation in the next 30 days; higher than 59% of CVEs (scores of 2026-10-31)
- CWE
- CWE-20
- Published
- Modified
- Record from
- the NVD, synced
Affected
- parseplatform:parse_server_push_adapter
Packages (OSV)
| Advisory | Ecosystem | Package | Affected | Fixed in |
|---|---|---|---|---|
| GHSA-mxhg-rvwx-x993 | npm | parse-server-push-adapter | <4.1.3 | 4.1.3 |
References
- https://github.com/parse-community/parse-server-push-adapter/pull/217
- https://github.com/parse-community/parse-server-push-adapter/releases/tag/4.1.3
- https://github.com/parse-community/parse-server-push-adapter/security/advisories/GHSA-mxhg-rvwx-x993
- https://github.com/parse-community/parse-server-push-adapter/pull/217
- https://github.com/parse-community/parse-server-push-adapter/releases/tag/4.1.3