Threats tagged 'ghsa-74ch-jc8r-c94c'

1 threat

Severity	CVSS	Threat	Source	Published	Score and star
Medium	6.3	CVE-2026-119571Parse Server from 9.7.0 before 9.10.5-alpha.10 contains an authorization flaw that applies _Installation updates Medium6.32026-10-30GCVE DatabaseCVE-2026-119571 Parse Server versions from 9.7.0 up to but not including 9.10.5-alpha.10 have an authorization flaw involving _Installation updates. This flaw allows an attacker who knows another installation's object ID to trigger processing of protected fields in a beforeSave trigger for that installation, even when protectedFieldsTriggerExempt is enabled. Report on CVE-2026-119571 Vulnerability CWE-639 #ghsa-74ch-jc8r-c94c	GCVE Database	2026-10-30

Page 1 of 1