Threats tagged 'ghsa-r8q4-6649-fq57'

Parse Server versions 8.6.109 before 8.6.116 and 9.10.6-alpha.1 before 9.10.7-alpha.2 have an information disclosure vulnerability. This flaw allows attackers with write but not read access to infer the presence of protected fields by observing markers in create or update responses that indicate whether fields are deleted. The vulnerability has a low severity score and no known exploits in the wild.