Read the docs

parse-community

Records159All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical22CVSS 9.0–10.0
CVSS high63CVSS 7.0–8.9

Exploited now

parse-community records in CISA KEV

No parse-community vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
Parse-server 102 records HIGH Parse Dashboard 4 records MEDIUM Parse Javascript Sdk 1 record MEDIUM Parse Server 1 record LOW Parse Server Push Adapter 1 record LOW

Records

1 record in Parse Server · all components

TI-2020-11899 CVE-2020-15126 · GHSA-236h-rqv8-8q73

Information disclosure through Viewer query in parse-server

Priority LOW 31

In parser-server from version 3.5.0 and before 4.3.0, an authenticated user using the viewer GraphQL query can by pass all read security on his User object and can also by pass all objects linked via relation or Pointer…

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.01072 Published 2020-07-22 Fixed in 4.3.0 CWE-863
Open these records in search →