UpHeron
All vulnerabilities

Servers and applications

CVE-2022-24901

Improper validation of the Apple certificate URL in the Apple Game Center authentication adapter allows attackers to bypass authentication, making the server vulnerable to DoS attacks. The vulnerability has been fixed by improving the URL validation and adding additional checks of the resource the URL points to before downloading it.

Severity
High 7.5
Published
4 May 2022
Last changed
17 Jun 2026
Added to UpHeron
1 Nov 2026
Fixed in
4.10.10, 5.2.1
Sources
NVD

Affected software

SoftwareAffected versions
Parse ServerServers and applications · cpe:a:parseplatform:parse-server
  • Every version before 4.10.10
  • From 5.0.0 before 5.2.1

References

  • NVD https://nvd.nist.gov/vuln/detail/CVE-2022-24901
  • CVE.org https://www.cve.org/CVERecord?id=CVE-2022-24901