Lucene search
+L

1 matches found

Github Security Blog
Github Security Blog
added 2026/03/06 11:25 p.m.20 views

parse-server: Malformed `$regex` query leaks database error details in API response

Impact A malformed $regex query parameter e.g. abc causes the database to return a structured error object that is passed unsanitized through the API response. This leaks database internals such as error messages, error codes, code names, cluster timestamps, and topology details. The vulnerabilit...

6.9CVSS5.9AI score0.00336EPSS
SaveExploits0References5Affected Software1
Rows per page
Query Builder