A Server-Side Request Forgery (SSRF) vulnerability exists in Parse Server's file upload functionality when using the 'uri' parameter to upload a Parse.File. This vulnerability allows the server to execute an arbitrary URI request. The feature was introduced in Parse Server 4.2.0 but never functioned correctly and caused server crashes. Due to its risky nature, the vulnerable feature has been removed in fixed versions 7.5.4 and 8.4.0-alpha.2.