CVE-2022-31112

npm/parse-server CVE-2022-31112: high 8.2, EPSS 1.30%

Protected fields exposed via LiveQuery

Action: Upgrade parse-server to 4.10.13 or later.

npm i parse-server@4.10.13

npm i parse-server@5.2.4

Affected

Fixed versions

Sources

• osv: GHSA-crrq-vr9j-fxxh
• https://github.com/parse-community/parse-server/security/advisories/GHSA-crrq-vr9j-fxxh
• https://nvd.nist.gov/vuln/detail/CVE-2022-31112
• https://github.com/parse-community/parse-server/issues/8073
• https://github.com/parse-community/parse-server/pull/8074
• https://github.com/parse-community/parse-server/commit/054f3e6ab01d66a0dcfb77725af28eac1485b375
• https://github.com/parse-community/parse-server/commit/309f64ced8700321df056fb3cc97f15007a00df1
• https://github.com/parse-community/parse-server/commit/9fd4516cde5c742f9f29dd05468b4a43a85639a6
• https://github.com/parse-community/parse-server
• https://github.com/parse-community/parse-server/releases/tag/5.2.4

CVE-2022-31112 · published 2022-07-06T19:52:23Z · modified 2023-12-06T01:02:18.617929Z · JSON