PT-2025-12429

Name of the Vulnerable Software and Affected Versions Parse Server versions prior to 7.5.2 Parse Server versions prior to 8.0.2 Description The issue affects Parse Server's 3rd party authentication handling, allowing authentication credentials from one app to be used in another, if the same...

CVE-2025-30168: Improper Authentication

Parse Server is an open source backend that can be deployed to any infrastructure that can run Node.js. Prior to 7.5.2 and 8.0.2, the 3rd party authentication handling of Parse Server allows the authentication credentials of some specific authentication providers to be used across multiple Parse...