CVE-2020-15270
1 advisory.
npm/parse-server CVE-2020-15270: medium 4.3, EPSS 1.17%
receiving subscription objects with deleted session
Action: Upgrade parse-server to 4.4.0 or later.
npm i parse-server@4.4.0Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 4.4.0 | - |
Fixed versions
| 4.4.0 |
Sources
- osv: GHSA-2xm2-xj2q-qgpj
- https://github.com/parse-community/parse-server/security/advisories/GHSA-2xm2-xj2q-qgpj
- https://nvd.nist.gov/vuln/detail/CVE-2020-15270
- https://github.com/parse-community/parse-server/commit/78b59fb26b1c36e3cdbd42ba9fec025003267f58
- https://github.com/parse-community/parse-server
CVE-2020-15270 · published · modified · JSON