Parseplatform
Page 2 of 2 — Parseplatform CVEs from a corpus of 109, newest first, with CVSS severity and publication dates.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2021-41109 | High | 7.5 | 2021-09-30 | Parse Server is an open source backend that can be deployed to any infrastructure that can run Node.js. Prior to version 4.10.4, for regular (non-LiveQuery) qu… |
CVE-2021-39187 | High | 7.5 | 2021-09-02 | Parse Server is an open source backend that can be deployed to any infrastructure that can run Node.js. Prior to version 4.10.3, Parse Server crashes when if a… |
CVE-2021-39138 | Medium | 4.8 | 2021-08-19 | Parse Server is an open source backend that can be deployed to any infrastructure that can run Node.js. Developers can use the REST API to signup users and als… |
CVE-2020-26288 | High | 7.7 | 2020-12-30 | Parse Server is an open source backend that can be deployed to any infrastructure that can run Node.js. It is an npm package "parse-server". In Parse Server be… |
CVE-2020-15270 | Medium | 4.3 | 2020-10-22 | Parse Server (npm package parse-server) broadcasts events to all clients without checking if the session token is valid. This allows clients with expired sessi… |
CVE-2020-15126 | Medium | 6.5 | 2020-07-22 | In parser-server from version 3.5.0 and before 4.3.0, an authenticated user using the viewer GraphQL query can by pass all read security on his User object and… |
CVE-2020-5251 | High | 7.7 | 2020-03-04 | In parser-server before version 4.1.0, you can fetch all the users objects, by using regex in the NoSQL query. Using the NoSQL, you can use a regex on sessionT… |
CVE-2019-1020013 | Medium | 5.3 | 2019-07-29 | parse-server before 3.6.0 allows account enumeration. |
CVE-2019-1020012 | High | 7.5 | 2019-07-29 | parse-server before 3.4.1 allows DoS after any POST to a volatile class. |