Para Security Vulnerabilities and Issues — Para CVE List

Lucene search

ErudikaPara

4 matches found

CVE•added 2022/05/18 3:15 p.m.•85 views

CVE-2022-1782

Cross-site Scripting (XSS) - Generic in GitHub repository erudika/para prior to v1.45.11.

9.4CVSS6.2AI score0.00302EPSS

CVE•added 2022/05/24 1:15 p.m.•84 views

CVE-2022-1848

Business Logic Errors in GitHub repository erudika/para prior to 1.45.11.

9CVSS5.6AI score0.00345EPSS

CVE•added 2025/06/05 5:15 p.m.•43 views

CVE-2025-49009

Para is a multitenant backend server/framework for object persistence and retrieval. A vulnerability that exists in versions prior to 1.50.8 in FacebookAuthFilter.java results in a full request URL being logged during a failed request to a Facebook user profile. The log includes the user's access t...

6.2CVSS6.3AI score0.00018EPSS

CVE•added 2025/06/02 12:15 p.m.•37 views

CVE-2025-48955

Para is a multitenant backend server/framework for object persistence and retrieval. A vulnerability that exists in versions prior to 1.50.8 exposes both access and secret keys in logs without redaction. These credentials are later reused in variable assignments for persistence but do not require l...

6.2CVSS6.3AI score0.00018EPSS