Lucene search
+L

1 matches found

Github Security Blog
Github Security Blog
added 2024/07/01 6:35 p.m.28 views

ZDI-CAN-23894: Parse Server literalizeRegexPart SQL Injection Authentication Bypass Vulnerability

Impact This vulnerability allows SQL injection when Parse Server is configured to use the PostgreSQL database. Patches The algorithm to detect SQL injection has been improved. Workarounds None. References - https://github.com/parse-community/parse-server/security/advisories/GHSA-c2hr-cqg6-8j6r -...

9.8CVSS7.8AI score0.20171EPSS
SaveExploits0References7Affected Software1
Rows per page
Query Builder