Lucene search
+L

1 matches found

OSV
OSV
added 2026/03/09 5:42 p.m.6 views

GHSA-HWX8-Q9CG-MQMC Parse Server: File metadata endpoint bypasses `beforeFind` / `afterFind` trigger authorization

Impact The file metadata endpoint GET /files/:appId/metadata/:filename does not enforce beforeFind / afterFind file triggers. When these triggers are used as access-control gates, the metadata endpoint bypasses them entirely, allowing unauthorized access to file metadata. This affects any...

6.3CVSS5.8AI score0.00295EPSS
SaveExploits0References3
Rows per page
Query Builder