Vulnerabilities > Parseplatform > Parse Server > 3.5.0

DATE CVE VULNERABILITY TITLE RISK
2020-03-04 CVE-2020-5251 Incorrect Authorization vulnerability in Parseplatform Parse-Server
In parser-server before version 4.1.0, you can fetch all the users objects, by using regex in the NoSQL query.
network
low complexity
parseplatform CWE-863
5.0
5.0
2019-07-29 CVE-2019-1020013 Information Exposure Through an Error Message vulnerability in Parseplatform Parse-Server
parse-server before 3.6.0 allows account enumeration.
network
low complexity
parseplatform CWE-209
5.0
5.0