CVE-2022-24760
1 advisory.
npm/parse-server CVE-2022-24760: critical 10
Command injection in Parse Server through prototype pollution
Action: Upgrade parse-server to 4.10.7 or later.
npm i parse-server@4.10.7Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 4.10.7 | - |
Fixed versions
| 4.10.7 |
Sources
- osv: GHSA-p6h4-93qp-jhcm
- https://github.com/parse-community/parse-server/security/advisories/GHSA-p6h4-93qp-jhcm
- https://nvd.nist.gov/vuln/detail/CVE-2022-24760
- https://github.com/parse-community/parse-server/commit/886bfd7cac69496e3f73d4bb536f0eec3cba0e4d
- https://github.com/parse-community/parse-server
- https://www.huntr.dev/bounties/ac24b343-e7da-4bc7-ab38-4f4f5cc9d099
CVE-2022-24760 · published · modified · JSON