Lucene search
+L

1 matches found

OSV
OSV
added 2024/03/06 11:00 a.m.21 views

BIT-PARSE-2023-41058 Trigger `beforeFind` not invoked in internal query pipeline in parse-server

Parse Server is an open source backend server. In affected versions the Parse Cloud trigger beforeFind is not invoked in certain conditions of Parse.Query. This can pose a vulnerability for deployments where the beforeFind trigger is used as a security layer to modify the incoming query. The...

7.5CVSS7.5AI score0.00623EPSS
SaveExploits0References6
Rows per page
Query Builder