{"action":"Upgrade parse-server to 5.4.4 or later.","affected":[{"fixed":"5.4.4","introduced":"0"},{"fixed":"6.1.1","introduced":"6.0.0"}],"component":"parse-server","cve_ids":["CVE-2023-32689"],"ecosystem":"npm","epss":0.00639,"exploited":false,"fixed_versions":["5.4.4","6.1.1"],"ghsa_id":"GHSA-9prm-jqwx-45x9","id":"tcs_01M5KFGJ2TZPZXZZJ3XGG84EK0","modified_at":"2023-12-06T01:03:01.864061Z","published_at":"2023-05-31T23:39:15Z","references":["https://osv.dev/vulnerability/GHSA-9prm-jqwx-45x9","https://github.com/parse-community/parse-server/security/advisories/GHSA-9prm-jqwx-45x9","https://nvd.nist.gov/vuln/detail/CVE-2023-32689","https://github.com/parse-community/parse-server/pull/8537","https://github.com/parse-community/parse-server/pull/8538","https://github.com/parse-community/parse-server"],"severity":{"label":"medium","score":6.3},"sources":[{"source":"osv","source_id":"GHSA-9prm-jqwx-45x9","url":"https://osv.dev/vulnerability/GHSA-9prm-jqwx-45x9"}],"summary":"Phishing attack vulnerability by uploading malicious HTML file"}