Vulnerabilities > Parseplatform > Parse Server > 4.0.0

DATE CVE VULNERABILITY TITLE RISK
2020-03-04 CVE-2020-5251 Incorrect Authorization vulnerability in Parseplatform Parse-Server
In parser-server before version 4.1.0, you can fetch all the users objects, by using regex in the NoSQL query.
network
low complexity
parseplatform CWE-863
5.0