RSS   Podatności dla 'Parse server'   RSS

2020-07-22
 
CVE-2020-15126

CWE-863
 

 
In parser-server from version 3.5.0 and before 4.3.0, an authenticated user using the viewer GraphQL query can by pass all read security on his User object and can also by pass all objects linked via relation or Pointer on his User object.

 

 >>> Vendor: Parseplatform 2 Produkty
Parse-server
Parse server


Copyright 2024, cxsecurity.com

 

Back to Top