Known vulnerabilities in Parse Server 4.0.0

Vendor: Parse Community

Software: Parse Server

Version: 4.0.0

Software CPE: cpe:2.3:a:parse_community:parse_server:*:*:*:*:*:*:*:*

Website: https://parseplatform.org/

Total vulnerabilities: 7

Public exploits: 0

Known exploited (KEV): 0

Highest CVSSv4 Score: 9.3

Vulnerabilities (7)

Vulnerability	CWE-ID	CSH Severity	Public Exploit	KEV	First fixed release	Published	Bulletins
#VU80441 - Improper Access Control CVE-2023-41058	CWE-284	Medium	No	No	5.5.5, 6.2.2	05.09.2023	SB2023090542
#VU64723 - Improper Certificate Validation CVE-2022-31083	CWE-295	High	No	No	4.10.11	27.06.2022	SB2022062736
#VU61372 - Improper Control of Generation of Code ('Code Injection')	CWE-94	High	No	No	5.0.0	15.03.2022	SB2022031509
#VU56933 - Exposure of sensitive information to an unauthorized actor	CWE-200	Low	No	No	4.10.4	30.09.2021	SB2021093003
#VU56141 - Exposure of sensitive information to an unauthorized actor CVE-2021-39138	CWE-200	Medium	No	No	4.5.1	27.08.2021	SB2021082712
#VU48082 - Operation on a Resource after Expiration or Release CVE-2020-15270	CWE-672	Low	No	No	4.4.0	23.10.2020	SB2020110217 SB2020110218
#VU46732 - Improper Authorization	CWE-285	Low	No	No	-	15.09.2020	SB2020091513