Loading HuntDB...
Hunt
Vulnerability Intelligence by wss.sh
Home Daily Briefings High Impact CVEs Recent Exploits KEV Catalog GitHub Advisories Latest Updates Security News
Sign In Sign Up
parse-community parse-server

Version >= 7.0.0-alpha.1, < 7.0.0-alpha.20

ALPHA 1 CVE

Known Vulnerabilities

CVE-2024-27298

parse-server is a Parse Server for Node.js / Express. This vulnerability allows SQL injection when Parse Server is configured to use the PostgreSQL database. The vulnerability has been fixed in 6.5.0 and 7.0.0-alpha.20.

CRITICAL CVSS 10.0 Published Mar 01, 2024