CVE-2021-47986
EUVD-2021-3485225.06.2026, 22:16
Parse Server before 4.10.0 contains a supply chain vulnerability where incorrect version tags were pushed to the repository linking to unreviewed code in a personal fork. Attackers could exploit this by specifying affected version tags in dependency declarations to execute unreviewed and potentially malicious code.Enginsight
Affected Products (NVD)
| Vendor | Product | Version |
|---|---|---|
| parseplatform | parse-server | 4.0.0:beta1 |
| parseplatform | parse-server | 4.0.0:beta2 |
| parseplatform | parse-server | 4.0.0:beta3 |
| parseplatform | parse-server | 4.0.0:beta4 |
| parseplatform | parse-server | 4.0.0:beta5 |
| parseplatform | parse-server | 4.0.0:beta6 |
| parseplatform | parse-server | 4.0.3 |
| parseplatform | parse-server | 4.0.4 |
| parseplatform | parse-server | 4.0.6 |
| parseplatform | parse-server | 4.0.7 |
| parseplatform | parse-server | 4.0.8 |
| parseplatform | parse-server | 4.0.9 |
| parseplatform | parse-server | 4.0.10 |
| parseplatform | parse-server | 4.0.11 |
| parseplatform | parse-server | 4.0.12 |
| parseplatform | parse-server | 4.0.13 |
| parseplatform | parse-server | 4.0.14 |
| parseplatform | parse-server | 4.6.0 |
| parseplatform | parse-server | 4.6.0:beta |
| parseplatform | parse-server | 4.7.0 |
| parseplatform | parse-server | 4.8.0 |
| parseplatform | parse-server | 4.8.1 |
| parseplatform | parse-server | 4.8.2 |
| parseplatform | parse-server | 4.8.3 |
| parseplatform | parse-server | 4.8.4 |
| parseplatform | parse-server | 4.8.5 |
| parseplatform | parse-server | 4.9.0 |
| parseplatform | parse-server | 4.9.1 |
| parseplatform | parse-server | 4.9.2 |
| parseplatform | parse-server | 4.9.3 |
𝑥
= Vulnerable software versions
Common Weakness Enumeration