Update 20241008070137 (#628)

feat: Updated at 20241008070137

Signed-off-by: bitnami-bot <[email protected]>

data/node/BIT-node-2023-32004.json

@@ -23,7 +23,7 @@
           "type": "SEMVER",
           "events": [
             {
-              "introduced": "0"
+              "introduced": "20.0.0"
             },
             {
               "fixed": "20.5.1"
@@ -59,5 +59,5 @@
     }
   ],
   "published": "2024-03-06T11:00:15.572Z",
-  "modified": "2024-10-02T07:52:37.481Z"
+  "modified": "2024-10-08T07:47:04.508Z"
 }

data/parse/BIT-parse-2024-47183.json

@@ -0,0 +1,72 @@
+{
+  "schema_version": "1.5.0",
+  "id": "BIT-parse-2024-47183",
+  "details": "Parse Server is an open source backend that can be deployed to any infrastructure that can run Node.js. If the Parse Server option allowCustomObjectId: true is set, an attacker that is allowed to create a new user can set a custom object ID for that new user that exploits the vulnerability and acquires privileges of a specific role. This vulnerability is fixed in 6.5.9 and 7.3.0.",
+  "aliases": [
+    "CVE-2024-47183"
+  ],
+  "affected": [
+    {
+      "package": {
+        "ecosystem": "Bitnami",
+        "name": "parse",
+        "purl": "pkg:bitnami/parse"
+      },
+      "severity": [
+        {
+          "type": "CVSS_V3",
+          "score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N"
+        }
+      ],
+      "ranges": [
+        {
+          "type": "SEMVER",
+          "events": [
+            {
+              "introduced": "0"
+            },
+            {
+              "fixed": "6.5.9"
+            },
+            {
+              "introduced": "7.0.0"
+            },
+            {
+              "fixed": "7.3.0"
+            }
+          ]
+        }
+      ]
+    }
+  ],
+  "database_specific": {
+    "severity": "High",
+    "cpes": [
+      "cpe:2.3:a:parseplatform:parse-server:*:*:*:*:*:node.js:*:*"
+    ]
+  },
+  "references": [
+    {
+      "type": "WEB",
+      "url": "https://github.com/parse-community/parse-server/commit/13ee52f0d19ef3a3524b3d79aea100e587eb3cfc"
+    },
+    {
+      "type": "WEB",
+      "url": "https://github.com/parse-community/parse-server/commit/1bfbccf9ee7ea77533b2b2aa7c4c69f3bd35e66f"
+    },
+    {
+      "type": "WEB",
+      "url": "https://github.com/parse-community/parse-server/pull/9317"
+    },
+    {
+      "type": "WEB",
+      "url": "https://github.com/parse-community/parse-server/pull/9318"
+    },
+    {
+      "type": "WEB",
+      "url": "https://github.com/parse-community/parse-server/security/advisories/GHSA-8xq9-g7ch-35hg"
+    }
+  ],
+  "published": "2024-10-08T07:14:06.158Z",
+  "modified": "2024-10-08T07:47:04.508Z"
+}