Lucene search
+L

16 matches found

OSV
OSV
added 2026/04/06 2:49 p.m.4 views

BIT-PARSE-2026-34784 Parse Server: Streaming file download bypasses afterFind file trigger authorization

Parse Server is an open source backend that can be deployed to any infrastructure that can run Node.js. Prior to versions 8.6.71 and 9.7.1, file downloads via HTTP Range requests bypass the afterFindParse.File trigger and its validators on storage adapters that support streaming e.g. the default...

8.2CVSS5.8AI score0.00378EPSS
SaveExploits0References6
Rows per page
Query Builder