EUVD-2021-2135

🗓️ 07 Oct 2025 00:30:54Reported by EUVDType

Parse Server crashes with invalid explain option before version 4.10.3; upgrade to patch it.

Reporter	Title	Published	Views	Family All 12
CNNVD	Parse Server 注入漏洞	2 Sep 202100:00	–	cnnvd
CVE	CVE-2021-39187	2 Sep 202115:35	–	cve
Cvelist	CVE-2021-39187 Crash server with query parameter	2 Sep 202115:35	–	cvelist
Github Security Blog	Parse Server crashes with query parameter	2 Sep 202116:51	–	github
NVD	CVE-2021-39187	2 Sep 202116:15	–	nvd
OSV	BIT-PARSE-2021-39187 Crash server with query parameter	6 Mar 202411:03	–	osv
OSV	GHSA-XQP8-W826-HH6X Parse Server crashes with query parameter	2 Sep 202116:51	–	osv
Prion	Design/Logic Flaw	2 Sep 202116:15	–	prion
Positive Technologies	PT-2021-22444 · Unknown · Parse Server +1	2 Sep 202100:00	–	ptsecurity
RedhatCVE	CVE-2021-39187	6 Feb 202503:57	–	redhatcve

[
  {
    "enisaIdVendor": [
      {
        "id": "c68cf627-fd41-3041-872d-11e238591aa1",
        "vendor": {
          "name": "parse-community"
        }
      }
    ],
    "enisaIdProduct": [
      {
        "id": "1bea19a6-80ba-34f2-9dce-480c543f30b0",
        "product": {
          "name": "parse-server"
        },
        "product_version": "< 4.10.3"
      }
    ]
  }
]

Source	Link
github	www.github.com/parse-community/parse-server/security/advisories/GHSA-xqp8-w826-hh6x
nvd	www.nvd.nist.gov/vuln/detail/CVE-2021-39187
github	www.github.com/parse-community/parse-server/commit/308668c89474223e2448be92d6823b52c1c313ec
github	www.github.com/parse-community/parse-server
github	www.github.com/parse-community/parse-server/releases/tag/4.10.3
jira	www.jira.mongodb.org/browse/NODE-3463
github	www.github.com/advisories/GHSA-293c-r3p4-g63r

07 Oct 2025 00:30Current

7.4High risk

Vulners AI Score7.4

CVSS 3.17.5

CVSS 25

EPSS0.0066