Lucene search
+L

1 matches found

Github Security Blog
Github Security Blog
added 2026/02/25 6:37 p.m.12 views

Parse Dashboard has incomplete authentication on AI Agent endpoint

Impact The AI Agent API endpoint POST /apps/:appId/agent lacks authentication. Unauthenticated remote attackers can send requests to the endpoint and perform arbitrary database operations against any connected Parse Server using the master key. Patches The fix adds authentication middleware to th...

9.9CVSS5.6AI score0.0045EPSS
SaveExploits0References5Affected Software1
Rows per page
Query Builder