Vulnerability Details CVE-2021-47986
Parse Server before 4.10.0 contains a supply chain vulnerability where incorrect version tags were pushed to the repository linking to unreviewed code in a personal fork. Attackers could exploit this by specifying affected version tags in dependency declarations to execute unreviewed and potentially malicious code.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.001
EPSS Ranking 2.2%
CVSS Severity
CVSS v3 Score 7.5
References
Products affected by CVE-2021-47986
-
cpe:2.3:a:parseplatform:parse-server:4.0.0
-
cpe:2.3:a:parseplatform:parse-server:4.0.10
-
cpe:2.3:a:parseplatform:parse-server:4.0.11
-
cpe:2.3:a:parseplatform:parse-server:4.0.12
-
cpe:2.3:a:parseplatform:parse-server:4.0.13
-
cpe:2.3:a:parseplatform:parse-server:4.0.14
-
cpe:2.3:a:parseplatform:parse-server:4.0.3
-
cpe:2.3:a:parseplatform:parse-server:4.0.4
-
cpe:2.3:a:parseplatform:parse-server:4.0.6
-
cpe:2.3:a:parseplatform:parse-server:4.0.7
-
cpe:2.3:a:parseplatform:parse-server:4.0.8
-
cpe:2.3:a:parseplatform:parse-server:4.0.9
-
cpe:2.3:a:parseplatform:parse-server:4.6.0
-
cpe:2.3:a:parseplatform:parse-server:4.7.0
-
cpe:2.3:a:parseplatform:parse-server:4.8.0
-
cpe:2.3:a:parseplatform:parse-server:4.8.1
-
cpe:2.3:a:parseplatform:parse-server:4.8.2
-
cpe:2.3:a:parseplatform:parse-server:4.8.3
-
cpe:2.3:a:parseplatform:parse-server:4.8.4
-
cpe:2.3:a:parseplatform:parse-server:4.8.5
-
cpe:2.3:a:parseplatform:parse-server:4.9.0
-
cpe:2.3:a:parseplatform:parse-server:4.9.1
-
cpe:2.3:a:parseplatform:parse-server:4.9.2
-
cpe:2.3:a:parseplatform:parse-server:4.9.3