CVE-2019-1020013: Medium severity lifplatforms lif auth server vulnerability
Published Jul 29, 2019
·Updated
parse-server before 3.6.0 allows account enumeration.
Affected Software
1 affected component
parseplatform Parse-server<3.6.0
Remediation
Event History
Jul 29, 2019
CVE Published
via MITRE·12:18 PM
Data Sourced
via MITRE·12:18 PM
DescriptionWeakness
Frequently Asked Questions
1
What is CVE-2019-1020013?
CVE-2019-1020013 is a vulnerability in parse-server before version 3.6.0 that allows for account enumeration.
2
How severe is CVE-2019-1020013?
CVE-2019-1020013 is rated as medium severity with a CVSS score of 5.3.
3
How does CVE-2019-1020013 affect parse-server?
CVE-2019-1020013 affects parse-server versions up to (exclusive) 3.6.0.
4
How can I fix CVE-2019-1020013?
To fix CVE-2019-1020013, you need to update parse-server to version 3.6.0 or higher.
5
Where can I find more information about CVE-2019-1020013?
More information about CVE-2019-1020013 can be found at the following reference link: [GitHub Advisory](https://github.com/parse-community/parse-server/security/advisories/GHSA-8w3j-g983-8jh5)