parse vulnerabilities (Bitnami)
136 vulnerabilities.
parseBitnamiParse Server has Server-Side Request Forgery (SSRF) in Instagram OAuth Adapter8.3 HighparseBitnamiParse Server vulnerable to Cross-Site Scripting (XSS) via Unescaped Mustache Template Variables5.3 MediumparseBitnamiParse Server GitHub CI workflow vulnerable to RCE through Improper Privilege Management6.9 MediumparseBitnamiParse Server allows public `explain` queries which may expose sensitive database performance information and schema details6.9 MediumparseBitnamiParse Server Vulnerable to Server-Side Request Forgery (SSRF) in File Upload via URI Format7.5 HighparseBitnamiParse Server exposes the data schema via GraphQL API5.3 MediumparseBitnamiParse Server has an OAuth login vulnerability6.9 MediumparseBitnamiParse Server's custom object ID allows to acquire role privileges8.1 HighparseBitnamiZDI-CAN-23894: Parse Server literalizeRegexPart SQL Injection Authentication Bypass Vulnerability9.8 CriticalparseBitnamiParse Server crash and RCE via invalid Cloud Function or Cloud Job name9.1 CriticalparseBitnamiParse Server literalizeRegexPart SQL Injection10.0 CriticalparseBitnamiParse Server may crash when uploading file without extension7.5 HighparseBitnamiTrigger `beforeFind` not invoked in internal query pipeline in parse-server7.5 HighparseBitnamiParse Server vulnerable to remote code execution via MongoDB BSON parser through prototype pollution9.8 CriticalparseBitnamiParse Server vulnerable to phishing attack vulnerability that involves uploading malicious HTML file6.3 MediumparseBitnamiParse Server is vulnerable to authentication bypass via spoofing8.7 HighparseBitnamiParse Server subject to Prototype pollution via Cloud Code Webhooks7.2 HighparseBitnamiParse Server Prototype pollution and Injection via Cloud Code Webhooks or Cloud Code Triggers7.2 HighparseBitnamiParse Server vulnerable to Remote Code Execution via prototype pollution in MongoDB BSON parser9.8 CriticalparseBitnamiParse Server crashes when receiving file download request with invalid byte range7.5 HighparseBitnamiParse Server subject to Improper Authentication allowing Auth adapter app ID validation to be circumvented3.7 LowparseBitnamiParse Server subject to Incorrect Resource Transfer Between Spheres4.3 MediumparseBitnamiParse Server vulnerable to brute force guessing of user sensitive data via search patterns8.6 HighparseBitnamiProtected fields exposed via LiveQuery in parse-server8.2 HighparseBitnamiInvalid file request can crashe parse-server7.5 HighparseBitnamiAuthentication bypass in Parse Server Apple Game Center auth adapter8.6 HighparseBitnamiAuthentication bypass and denial of service (DoS) vulnerabilities in Apple Game Center auth adapter7.5 HighparseBitnamiCommand Injection in Parse server10.0 CriticalparseBitnamiLiveQuery publishes user session tokens7.5 HighparseBitnamiParse Server - Arbitrary Code Execution via Malicious Version Tags7.7 HighparseBitnamiParse Server - Unreviewed Code Execution via Malicious Version Tags7.7 HighparseBitnamiCrash server with query parameter7.5 HighparseBitnamiNew anonymous user session acts as if it's created with password4.8 MediumparseBitnamiParse Server stores password in plain text7.7 HighparseBitnamiImproper session expiration in Parse Server4.3 MediumparseBitnamiInformation disclosure in parse-server7.7 High