parse-community parse-dashboard Schwachstellen (CVE)

Für parse-community parse-dashboard veröffentlichte CVE-Einträge, neueste zuerst. Folgen Sie, um bei neuen Einträgen eine E-Mail zu erhalten.

4 Ergebnisse
9.9Kritisch
CVE-2026-27595

Parse Dashboard has incomplete authentication on AI Agent endpoint

parse-community parse-dashboard

Parse Dashboard is a standalone dashboard for managing Parse Server apps. In versions 7.3.0-alpha.42 through 9.0.0-alpha.7, the AI Agent API endpoint (POST `/apps/:appId/agent`) has multiple security vulnerabilities that, when chained, allow unauthenticated r…

8.3Hoch
CVE-2026-27609

Parse Dashboard Missing CSRF Protection on Agent Endpoint

parse-community parse-dashboard

Parse Dashboard is a standalone dashboard for managing Parse Server apps. In versions 7.3.0-alpha.42 through 9.0.0-alpha.7, the AI Agent API endpoint (`POST /apps/:appId/agent`) lacks CSRF protection. An attacker can craft a malicious page that, when visited …

9.3Kritisch
CVE-2026-27608

Parse Dashboard Missing Authorization on Agent Endpoint

parse-community parse-dashboard

Parse Dashboard is a standalone dashboard for managing Parse Server apps. In versions 7.3.0-alpha.42 through 9.0.0-alpha.7, the AI Agent API endpoint (`POST /apps/:appId/agent`) does not enforce authorization. Authenticated users scoped to specific apps can a…