parseplatform parse dashboard güvenlik açıkları (CVE)

parseplatform parse dashboard için yayımlanan CVE kayıtları, en yenisi üstte. Yeni bir açık çıktığında e-posta almak için takip edin.

4 sonuç
8.3Yüksek
CVE-2026-27609

Parse Dashboard Missing CSRF Protection on Agent Endpoint

parse-community parse-dashboard

Parse Dashboard is a standalone dashboard for managing Parse Server apps. In versions 7.3.0-alpha.42 through 9.0.0-alpha.7, the AI Agent API endpoint (`POST /apps/:appId/agent`) lacks CSRF protection. An attacker can craft a malicious page that, when visited …

9.3Kritik
CVE-2026-27608

Parse Dashboard Missing Authorization on Agent Endpoint

parse-community parse-dashboard

Parse Dashboard is a standalone dashboard for managing Parse Server apps. In versions 7.3.0-alpha.42 through 9.0.0-alpha.7, the AI Agent API endpoint (`POST /apps/:appId/agent`) does not enforce authorization. Authenticated users scoped to specific apps can a…