Threats tagged 'ghsa-2mh8-rx95-ggpp'

1 threat

Severity	CVSS	Threat	Source	Published	Score and star
Low	2.3	CVE-2026-121413Parse Server before 8.6.112 and 9.0.0 before 9.10.6-alpha.4 contains an authorization bypass in the session upgrade Low2.32026-11-03GCVE DatabaseCVE-2026-121413 Parse Server versions before 8.6.112 and 9.0.0 before 9.10.6-alpha.4 have an authorization bypass vulnerability in the session upgrade endpoint. This flaw allows attackers with a valid session token to create new sessions without proper permission checks, extending session validity even after logout. Report on CVE-2026-121413 Vulnerability CWE-863 #ghsa-2mh8-rx95-ggpp	GCVE Database	2026-11-03

Page 1 of 1