CVE-2022-31083

npm/parse-server CVE-2022-31083: high 8.6

Authentication bypass vulnerability in Apple Game Center auth adapter

Action: Upgrade parse-server to 4.10.11 or later.

npm i parse-server@4.10.11

npm i parse-server@5.2.2

Affected

Fixed versions

Sources

• osv: GHSA-rh9j-f5f8-rvgc
• https://github.com/parse-community/parse-server/security/advisories/GHSA-rh9j-f5f8-rvgc
• https://nvd.nist.gov/vuln/detail/CVE-2022-31083
• https://github.com/parse-community/parse-server/pull/8054
• https://github.com/parse-community/parse-server/pull/8054/commits/0cc299f82e367518f2fe7a53b99f3f801a338cf4
• https://github.com/parse-community/parse-server/pull/8054/commits/2084b7c569697a5230e42511799eeac9219db5a9
• https://github.com/parse-community/parse-server/commit/ba2b0a9cb9a568817a114b132a4c2e0911d76df1
• https://developer.apple.com/news/?id=stttq465
• https://github.com/parse-community/parse-server

CVE-2022-31083 · published 2022-06-17T22:09:09Z · modified 2023-12-06T01:02:18.318373Z · JSON