Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
2 selected

1 record

Vendor: parse-community Component: Parse Server Clear all filters
TI-2020-11899 CVE-2020-15126 · GHSA-236h-rqv8-8q73

Information disclosure through Viewer query in parse-server

Priority LOW 31

In parser-server from version 3.5.0 and before 4.3.0, an authenticated user using the viewer GraphQL query can by pass all read security on his User object and can also by pass all objects linked via relation or Pointer…

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.01072 Published 2020-07-22 Fixed in 4.3.0 CWE-863