Privilege Escalation

2021-08-2002:20:09

Veracode Vulnerability Database

sca.analysiscenter.veracode.com

parse-server

privilege escalation

incorrect session creation

createwith function

password

anonymous user

EPSS

0.001

Percentile

36.7%

JSON

parse-server is vulnerable to privilege escalation. The vulnerability exists due to an incorrect session creation when using createWith function that incorrectly classified the session type as being created with a password which gives that user a different level of access than one created as an anonymous user.