Parse Server Stored XSS via trailing-dot filename bypass (GHSA-7wqv-xjf3-x35v/CVE-2025-53724)
Security Advisory
GHSA-7wqv-xjf3-x35v
Low
Parse Server
Affected:
- parse-server >= 9.0.0, < 9.9.1-alpha.4
- parse-server <= 8.6.78
Fixed in:
- 9.9.1-alpha.4
- 8.6.79
Referenced CVEs:
CVE-2026-53724
文章内图片已隐藏以节省流量 · Upgrade to Pro to view images & offline archive
This content was auto-fetched from github.com, cleaned by our LLM pipeline, and translated to English. View original.