CVE-2020-26288

Published December 30th, 2020

View on NVD ↗

CVSS v3

7.7

HIGH

CVSS v2

MEDIUM

Affected

PROJECTS

Description

Parse Server is an open source backend that can be deployed to any infrastructure that can run Node.js. It is an npm package "parse-server". In Parse Server before version 4.5.0, user passwords involved in LDAP authentication are stored in cleartext. This is fixed in version 4.5.0 by stripping password after authentication to prevent cleartext password storage.

parse-community/parse-server

Parse Server for Node.js / Express

GitHub

21.4K

parse-server

An express module providing a Parse-compatible API server

NPM