Lucene search
+L

2 matches found

Zero Day Initiative
Zero Day Initiative
added 2023/08/22 12:0 a.m.25 views

Parse Server transformUpdate Prototype Pollution Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Parse Server. Authentication is required to exploit this vulnerability. The specific flaw exists within the transformUpdate function. The issue results from the lack of control over modifications to...

7.2CVSS7.5AI score0.03203EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
added 2022/11/15 12:0 a.m.31 views

Parse Server transformUpdate Prototype Pollution Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Parse Server. Authentication is not required to exploit this vulnerability. The specific flaw exists within the transformUpdate function. The issue results from the lack of control over modifications...

9.8CVSS4.8AI score0.38717EPSS
SaveExploits0References1
Rows per page
Query Builder