Threats tagged 'ghsa-9m35-gcx2-qx2g'

Parse Server versions from 9.7.0 up to but not including 9.10.5-alpha.7 contain an information disclosure vulnerability. This flaw allows clients with create or update permissions to read protected field values that are set by beforeSave triggers using dot notation keys when the protectedFieldsSaveResponseExempt setting is false. The vulnerability has a low severity score and does not affect integrity or availability.