{"action":"Upgrade parse-server to 6.5.9 or later.","affected":[{"fixed":"6.5.9","introduced":"0"},{"fixed":"7.3.0","introduced":"7.0.0"}],"component":"parse-server","cve_ids":["CVE-2024-47183"],"ecosystem":"npm","epss":0.00416,"exploited":false,"fixed_versions":["6.5.9","7.3.0"],"ghsa_id":"GHSA-8xq9-g7ch-35hg","id":"tcs_01M5KFEASPS456YTGRFQCRN8WD","modified_at":"2024-10-08T08:12:09.784629Z","published_at":"2024-10-04T18:50:56Z","references":["https://osv.dev/vulnerability/GHSA-8xq9-g7ch-35hg","https://github.com/parse-community/parse-server/security/advisories/GHSA-8xq9-g7ch-35hg","https://nvd.nist.gov/vuln/detail/CVE-2024-47183","https://github.com/parse-community/parse-server/pull/9317","https://github.com/parse-community/parse-server/pull/9318","https://github.com/parse-community/parse-server/commit/13ee52f0d19ef3a3524b3d79aea100e587eb3cfc","https://github.com/parse-community/parse-server/commit/1bfbccf9ee7ea77533b2b2aa7c4c69f3bd35e66f","https://github.com/parse-community/parse-server"],"severity":{"label":"high","score":8.1},"sources":[{"source":"osv","source_id":"GHSA-8xq9-g7ch-35hg","url":"https://osv.dev/vulnerability/GHSA-8xq9-g7ch-35hg"}],"summary":"Parse Server's custom object ID allows to acquire role privileges"}