CVE-2022-31112

🗓️ 30 Jun 2022 16:40:13Reported by GitHub_MType

cve🔗 web.nvd.nist.gov📰️ 3 Media mentions👁 113 Views

Parse Server LiveQuery vulnerability in versions prior to CVE-2022-31112 allows exposure of protected fields to client

Reporter	Title	Published	Views	Family All 16
Circl	CVE-2022-31112	30 Jun 202220:38	–	circl
CNNVD	Parse Server information leakage vulnerability	30 Jun 202200:00	–	cnnvd
Cvelist	CVE-2022-31112 Protected fields exposed via LiveQuery in parse-server	30 Jun 202216:40	–	cvelist
EUVD	EUVD-2022-6325	3 Oct 202520:07	–	euvd
Github Security Blog	Protected fields exposed via LiveQuery	6 Jul 202219:52	–	github
Mend	CVE-2022-31112	30 Jun 202216:40	–	mend
NVD	CVE-2022-31112	30 Jun 202217:15	–	nvd
osv_bit	BIT-PARSE-2022-31112 Protected fields exposed via LiveQuery in parse-server	6 Mar 202411:02	–	osv_bit
osv_ghsa	GHSA-CRRQ-VR9J-FXXH Protected fields exposed via LiveQuery	6 Jul 202219:52	–	osv_ghsa
Prion	Design/Logic Flaw	30 Jun 202217:15	–	prion

NVD

Vulners

Node

parseplatform parse-serverRange<4.10.13node.js

parseplatform parse-serverRange5.0.0–5.2.4node.js

[
  {
    "product": "parse-server",
    "vendor": "parse-community",
    "versions": [
      {
        "status": "affected",
        "version": "< 4.10.13"
      },
      {
        "status": "affected",
        "version": ">= 5.0.0, < 5.2.4"
      }
    ]
  }
]

Source	Link
github	www.github.com/parse-community/parse-server/commit/309f64ced8700321df056fb3cc97f15007a00df1
github	www.github.com/parse-community/parse-server/issues/8073
github	www.github.com/parse-community/parse-server/releases/tag/5.2.4
github	www.github.com/parse-community/parse-server/security/advisories/GHSA-crrq-vr9j-fxxh
github	www.github.com/parse-community/parse-server/commit/9fd4516cde5c742f9f29dd05468b4a43a85639a6
github	www.github.com/parse-community/parse-server/pull/8074

17 Jun 2026 04:44Current

8.1High risk

Vulners AI Score8.1

CVSS 26.4

CVSS 3.18.2

EPSS0.01304

SSVC