Injection and Smuggling

Every one of the 4 is a mark on the map. Named now: 1 to 4, most at risk first.

1. Command Injection in Parse serverCVE-2022-24760parse-community · CVSS 10 · 49% likely

   CWE-74

2. Crash server with query parameterCVE-2021-39187parse-community · CVSS 7.5 · 1.8% likely

   CWE-74

3. Parse Server crash and RCE via invalid Cloud Function or Cloud Job nameCVE-2024-29027parse-community · CVSS 9.1 · 1.2% likely

   CWE-74

4. Parse Server has an LDAP injection via unsanitized user input in DN and group filter constructionCVE-2026-31828parse-community · CVSS 6 · 0.5% likely

   CWE-90

exploited in the wildcheck availableringed, named or not: CyberSIXT has reported on it

Zoom in on the map and the dots under the middle of it are named where they are.