Lucene search
Veracode Vulnerability DatabaseVERACODE:22637HistoryMar 05, 2020 - 6:30 a.m.
Information Disclosure
2020-03-0506:30:14
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
7
EPSS
0.001
Percentile
30.9%
parse-server is vulnerable to information disclosure. An insecure regular expression parsing of the _sessionToken and token[$regex] variables allows an attacker to discover and retrieve valid accounts, or verify and reset another user’s account.
Related
cve
cve
CVE-2020-5251
2020-03-04 15:15:13
prion
prion
Code injection
2020-03-04 15:15:00
cvelist
cvelist
CVE-2020-5251 Information disclosure in parse-server
2020-03-04 15:10:14
osv
osv
CVE-2020-5251
2020-03-04 15:15:13
Information disclosure in parse-server
2020-03-04 20:20:27
BIT-parse-2020-5251
2024-03-06 11:04:01
githubexploit
githubexploit
Exploit for Incorrect Authorization in Parseplatform Parse-Server
2020-12-01 09:45:48
github
github
Information disclosure in parse-server
2020-03-04 20:20:27
nvd
nvd
CVE-2020-5251
2020-03-04 15:15:13