PT-2019-11628

Name of the Vulnerable Software and Affected Versions: parse-server versions prior to 3.4.1 Description: The issue allows for a denial of service DoS after any POST request to a volatile class. If a POST request is made to a volatile class, such as "/parse/classes/ Audience", any subsequent POST...

Information Disclosure

parse-server is vulnerable to information disclosures. A malicious user can view personal identifiable information when querying the database without authorization...