CVE-2025-30168

🗓️ 21 Mar 2025 14:54:22Reported by GitHub_MType

Parse Server prior to versions 7.5.2 and 8.0.2 allows cross-app credential sharing vulnerability.

Reporter	Title	Published	Views	Family All 13
Circl	CVE-2025-30168	21 Mar 202515:19	–	circl
CNNVD	parse-server 授权问题漏洞	21 Mar 202500:00	–	cnnvd
Cvelist	CVE-2025-30168 Parse Server has an OAuth login vulnerability	21 Mar 202514:54	–	cvelist
EUVD	EUVD-2025-7240	3 Oct 202520:07	–	euvd
Github Security Blog	Parse Server has an OAuth login vulnerability	21 Mar 202517:42	–	github
NVD	CVE-2025-30168	21 Mar 202515:15	–	nvd
OSV	BIT-PARSE-2025-30168 Parse Server has an OAuth login vulnerability	25 Mar 202507:27	–	osv
OSV	CVE-2025-30168 Parse Server has an OAuth login vulnerability	21 Mar 202514:54	–	osv
OSV	GHSA-837Q-JHWX-CMPV Parse Server has an OAuth login vulnerability	21 Mar 202517:42	–	osv
RedhatCVE	CVE-2025-30168	23 Mar 202515:21	–	redhatcve

Vulners

Node

parse-community parse-serverRange<7.5.2

parse-community parse-serverRange8.0.0–8.0.2

[
  {
    "vendor": "parse-community",
    "product": "parse-server",
    "versions": [
      {
        "version": "< 7.5.2",
        "status": "affected"
      },
      {
        "version": ">= 8.0.0 ,< 8.0.2",
        "status": "affected"
      }
    ]
  }
]

Source	Link
github	www.github.com/parse-community/parse-server/commit/5ef0440c8e763854e62341acaeb6dc4ade3ba82f
github	www.github.com/parse-community/parse-server/pull/9668
github	www.github.com/parse-community/parse-server/commit/2ff9c71030bce3aada0a00fbceedeb7ae2c8a41e
github	www.github.com/parse-community/parse-server/pull/9667
github	www.github.com/parse-community/parse-server/security/advisories/GHSA-837q-jhwx-cmpv
docs	www.docs.parseplatform.org/parse-server/guide/

17 Jun 2026 09:08Current

6.7Medium risk

Vulners AI Score6.7

CVSS 3.16.9

EPSS0.00362

SSVC

CWE-287