Vulnerabilidades de parse-community parse-dashboard (CVE)

Registros CVE publicados para parse-community parse-dashboard, los más recientes primero. Siga el producto para recibir un correo con cada nueva.

4 resultados
9.9Crítica
CVE-2026-27595

Parse Dashboard has incomplete authentication on AI Agent endpoint

parse-community parse-dashboard

Parse Dashboard is a standalone dashboard for managing Parse Server apps. In versions 7.3.0-alpha.42 through 9.0.0-alpha.7, the AI Agent API endpoint (POST `/apps/:appId/agent`) has multiple security vulnerabilities that, when chained, allow unauthenticated r…

8.3Alta
CVE-2026-27609

Parse Dashboard Missing CSRF Protection on Agent Endpoint

parse-community parse-dashboard

Parse Dashboard is a standalone dashboard for managing Parse Server apps. In versions 7.3.0-alpha.42 through 9.0.0-alpha.7, the AI Agent API endpoint (`POST /apps/:appId/agent`) lacks CSRF protection. An attacker can craft a malicious page that, when visited …

9.3Crítica
CVE-2026-27608

Parse Dashboard Missing Authorization on Agent Endpoint

parse-community parse-dashboard

Parse Dashboard is a standalone dashboard for managing Parse Server apps. In versions 7.3.0-alpha.42 through 9.0.0-alpha.7, the AI Agent API endpoint (`POST /apps/:appId/agent`) does not enforce authorization. Authenticated users scoped to specific apps can a…