Beveiligingsadvies

CVE-2025-62374

CVE-kwetsbaarheidsdetails - eXtreme Datacenter Security Operations

Gepubliceerd 2025-10-14 20:06:43

Laatst bijgewerkt 2025-10-14 20:29:30

Toegewezen door GitHub_M

CVSS-score 6.4

Status PUBLISHED

Beschrijving

Parse Javascript SDK provides access to the powerful Parse Server backend from your JavaScript app. Prior to 7.0.0, injection of malicious payload allows attacker to remotely execute arbitrary code. ParseObject.fromJSON, ParseObject.pin, ParseObject.registerSubclass, ObjectStateMutations (internal), and encode/decode (internal) are affected. This vulnerability is fixed in 7.0.0.

← Alle CVE's bekijken Bekijk op cve.org ↗