1 matches found
Parse Dashboard has incomplete authentication on AI Agent endpoint
Impact The AI Agent API endpoint POST /apps/:appId/agent lacks authentication. Unauthenticated remote attackers can send requests to the endpoint and perform arbitrary database operations against any connected Parse Server using the master key. Patches The fix adds authentication middleware to th...
9.9CVSS5.6AI score0.0045EPSS
SaveExploits0References5Affected Software1
20