CVE-2020-15126

In parser-server from version 3.5.0 and before 4.3.0, an authenticated user using the viewer GraphQL query can by pass all read security on his User object and can also by pass all objects linked via relation or Pointer on his User object...

CVE-2020-15126

In parser-server from version 3.5.0 and before 4.3.0, an authenticated user using the viewer GraphQL query can by pass all read security on his User object and can also by pass all objects linked via relation or Pointer on his User object...

PT-2020-14206

Name of the Vulnerable Software and Affected Versions parser-server versions 3.5.0 through 4.2.x Description The issue allows an authenticated user using the viewer GraphQL query to bypass all read security on their User object and on objects linked via relation or Pointer on their User object...