Known vulnerabilities in Parse Server 3.4.1

Vendor: Parse Community
Software: Parse Server
Version: 3.4.1
Software CPE: cpe:2.3:a:parse_community:parse_server:*:*:*:*:*:*:*:*
Website: https://parseplatform.org/
Total vulnerabilities: 5
Public exploits: 0
Known exploited (KEV): 0
Highest CVSSv4 Score: 9.3

Vulnerabilities by Severity

Severity distribution of vulnerabilities affecting Parse Server version 3.4.1 Parse Server 3.4.1 is affected by 5 vulnerabilities: 1 high, 1 medium, 3 low Critical High Medium Low

Vulnerabilities (5)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU80441 - Improper Access Control
CVE-2023-41058		 CWE-284 Medium
No
No
 5.5.5, 6.2.2 05.09.2023 SB2023090542
#VU61372 - Improper Control of Generation of Code ('Code Injection')
 CWE-94 High
No
No
 5.0.0 15.03.2022 SB2022031509
#VU56933 - Exposure of sensitive information to an unauthorized actor
 CWE-200 Low
No
No
 4.10.4 30.09.2021 SB2021093003
#VU48082 - Operation on a Resource after Expiration or Release
CVE-2020-15270		 CWE-672 Low
No
No
 4.4.0 23.10.2020 SB2020110217
SB2020110218
#VU46732 - Improper Authorization
 CWE-285 Low
No
No
 - 15.09.2020 SB2020091513