CVEs (103)
CVE VENDORS PRODUCTS UPDATED PUBLISHED CVSS |
|---|
In parser-server before version 4.1.0, you can fetch all the users objects, by using regex in the NoSQL query. Using the NoSQL, you can use a regex on sessionToken and find valid accounts this way. |
1Parseplatform 1Parse Server Jun 17, 2026 Jul 29, 2019 N/A· v4 5.3 MEDIUM· v3 5.0 MEDIUM· v2 parse-server before 3.6.0 allows account enumeration. |
1Parseplatform 1Parse Server Jun 17, 2026 Jul 29, 2019 N/A· v4 7.5 HIGH· v3 5.0 MEDIUM· v2 parse-server before 3.4.1 allows DoS after any POST to a volatile class. |