1 matches found
parse-server: Malformed `$regex` query leaks database error details in API response
Impact A malformed $regex query parameter e.g. abc causes the database to return a structured error object that is passed unsanitized through the API response. This leaks database internals such as error messages, error codes, code names, cluster timestamps, and topology details. The vulnerabilit...
6.9CVSS5.9AI score0.00336EPSS
SaveExploits0References5Affected Software1
20