Parse Dashboard is a standalone dashboard for managing Parse Server apps. In versions 7.3.0-alpha.42 through 9.0.0-alpha.7, the `ConfigKeyCache` uses the same cache key for both master key and read-only master key when resolving function-typed keys. Under specific timing conditions, a read-only user can receive the cached full master key, or a regular user can receive the cached read-only master key. The fix in version 9.0.0-alpha.8 uses distinct cache keys for master key and read-only master key. As a workaround, avoid using function-typed master keys, or remove the `agent` configuration block from your dashboard configuration.
References
Configurations
Configuration 1 (hide)
|
History
No history.
Information
Published : 2026-02-25 03:16
Updated : 2026-02-27 19:14
NVD link : CVE-2026-27610
Mitre link : CVE-2026-27610
CVE.ORG link : CVE-2026-27610
JSON object : View
Products Affected
parseplatform
- parse_dashboard
CWE
CWE-1289
Improper Validation of Unsafe Equivalence in Input
