Lucene search
GoogleOSV:CVE-2020-5251HistoryMar 04, 2020 - 3:15 p.m.
CVE-2020-5251
2020-03-0415:15:13
Google
osv.dev
4
In parser-server before version 4.1.0, you can fetch all the users objects, by using regex in the NoSQL query. Using the NoSQL, you can use a regex on sessionToken and find valid accounts this way.
Related
cve
cve
CVE-2020-5251
2020-03-04 15:15:13
prion
prion
Code injection
2020-03-04 15:15:00
cvelist
cvelist
CVE-2020-5251 Information disclosure in parse-server
2020-03-04 15:10:14
osv
osv
Information disclosure in parse-server
2020-03-04 20:20:27
BIT-parse-2020-5251
2024-03-06 11:04:01
veracode
veracode
Information Disclosure
2020-03-05 06:30:14
githubexploit
githubexploit
Exploit for Incorrect Authorization in Parseplatform Parse-Server
2020-12-01 09:45:48
github
github
Information disclosure in parse-server
2020-03-04 20:20:27
nvd
nvd
CVE-2020-5251
2020-03-04 15:15:13