Authentication Bypass

parse-server is vulnerable to authentication bypass. The vulnerability exists in validateAppId function in facebook.js and spotify.js because the appIds in server-side authentication adapter configuration is set as a string which allows an attacker to send requests from different appIds and get...