Lucene search
+L

1 matches found

Github Security Blog
Github Security Blog
added 2026/03/18 7:49 p.m.18 views

Parse Server leaks protected fields via LiveQuery afterEvent trigger

Impact When a Parse.Cloud.afterLiveQueryEvent trigger is registered for a class, the LiveQuery server leaks protected fields and authData to all subscribers of that class. Fields configured as protected via Class-Level Permissions protectedFields are included in LiveQuery event payloads for all...

8.2CVSS5.8AI score0.00421EPSS
SaveExploits0References5Affected Software1
Rows per page
Query Builder