Improper Isolation or Compartmentalization

Overview parse-server is a version of the Parse backend that can be deployed to any infrastructure that can run Node.js. Affected versions of this package are vulnerable to Improper Isolation or Compartmentalization via LiveQuery subscriptions that use a $or query, due to a flawed query hashing...