Authentication Bypass

parse-server is vulnerable to authentication bypass. The vulnerability exists in handleSession function in RestWrite.js which enables a foreign user to assign the session object of another user to their own by writing to the user field and impersonate the victim...