Lucene search
+L

1 matches found

Github Security Blog
Github Security Blog
•added 2026/02/25 6:37 p.m.•26 views

Parse Dashboard has incomplete authentication on AI Agent endpoint

Impact The AI Agent API endpoint POST /apps/:appId/agent lacks authentication. Unauthenticated remote attackers can send requests to the endpoint and perform arbitrary database operations against any connected Parse Server using the master key. Patches The fix adds authentication middleware to th...

9.9CVSS6.1AI score0.0065EPSS
SaveExploits0References5Affected Software1
Rows per page
Query Builder