Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
Improper session expiration in Parse Server
Vulnerability Description
Parse Server (npm package parse-server) broadcasts events to all clients without checking if the session token is valid. This allows clients with expired sessions to still receive subscription objects. It is not possible to create subscription objects with invalid session tokens. The issue is not patched.
CVSS Information
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N
Vulnerability Type
在过期或释放后对资源进行操作
Vulnerability Title
Parse Server 安全漏洞
Vulnerability Description
parse-server是一款开源的Backend-as-a-Service（BaaS）框架，它主要用于应用程序后端处理。 Parse Server 存在安全漏洞，该漏洞使会话过期的客户端仍可以接收订阅对象。
CVSS Information
N/A
Vulnerability Type
N/A