Impact

Parse Server crashes when uploading a file without extension.

Patches

A permanent fix has been implemented to prevent the server from crashing.

Workarounds

There are no known workarounds.

References

• GitHub security advisory: GHSA-792q-q67h-w579
• Patched in Parse Server 6: https://github.com/parse-community/parse-server/releases/tag/6.3.1
• Patched in Parse Server 5 (LTS): https://github.com/parse-community/parse-server/releases/tag/5.5.6