CVE-2025-53364 Scanner
CVE-2025-53364 Scanner - Information Disclosure vulnerability in Parse Server
Used 2.3k times · 3.3k assets checked · domain, subdomain, ipv4
CVE
CVE-2025-53364
5.3
CVSSmedium
Exploitable remotely over the internet · no authentication required.
Description
Parse Server is an open source backend that can be deployed to any infrastructure that can run Node.js. Starting in 5.3.0 and before 7.5.3 and 8.2.2, the Parse Server GraphQL API previously allowed public access to the GraphQL schema without requiring a session token or the master key. While schema introspection reveals only metadata and not actual data, this metadata can still expand the potential attack surface. This vulnerability is fixed in 7.5.3 and 8.2.2.
Attack Vector
Network
Privileges Req.
None
User Interaction
None
parse-server
Updated Sep 28, 2026View on NVD →
S4E scanner
CVE history: parse-server
Predict next CVE date with AIMonitor this CVE on your assets
S4E maps published CVEs to scanners and forecasts the next disclosure window for your stack.
Create a free account →