VULNERABILITY INTELLIGENCE

CVE-2020-5251

CVSS score7.7 HIGH

EPSS probability0.85%

CISA KEVNot currently listed

Published2020-03-04

Last modified2026-06-17

Description

In parser-server before version 4.1.0, you can fetch all the users objects, by using regex in the NoSQL query. Using the NoSQL, you can use a regex on sessionToken and find valid accounts this way.