GHSA-PFJ7-WV7C-22PR Parse Server has an auth provider validation bypass on login via partial authData
Impact An authentication bypass vulnerability allows an attacker to log in as any user who has linked a third-party authentication provider, without knowing the user's credentials. The attacker only needs to know the user's provider ID to gain full access to their account, including a valid sessi...