7

CVE-2026-27610

Parse Dashboard Has a Cache Key Collision that Leaks Master Key to Read-Only Sessions

Parse Dashboard is a standalone dashboard for managing Parse Server apps. In versions 7.3.0-alpha.42 through 9.0.0-alpha.7, the `ConfigKeyCache` uses the same cache key for both master key and read-only master key when resolving function-typed keys. Under specific timing conditions, a read-only user can receive the cached full master key, or a regular user can receive the cached read-only master key. The fix in version 9.0.0-alpha.8 uses distinct cache keys for master key and read-only master key. As a workaround, avoid using function-typed master keys, or remove the `agent` configuration block from your dashboard configuration.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
ParseplatformParse Dashboard Version7.3.0 Updatealpha.42 SwPlatformnode.js
ParseplatformParse Dashboard Version7.3.0 Updatealpha.43 SwPlatformnode.js
ParseplatformParse Dashboard Version7.3.0 Updatealpha.44 SwPlatformnode.js
ParseplatformParse Dashboard Version7.3.0 Updatealpha.5 SwPlatformnode.js
ParseplatformParse Dashboard Version7.3.0 Updatealpha.6 SwPlatformnode.js
ParseplatformParse Dashboard Version7.3.0 Updatealpha.7 SwPlatformnode.js
ParseplatformParse Dashboard Version7.3.0 Updatealpha.8 SwPlatformnode.js
ParseplatformParse Dashboard Version7.3.0 Updatealpha.9 SwPlatformnode.js
ParseplatformParse Dashboard Version7.4.0 Updatealpha.1 SwPlatformnode.js
ParseplatformParse Dashboard Version7.4.0 Updatealpha.2 SwPlatformnode.js
ParseplatformParse Dashboard Version7.4.0 Updatealpha.3 SwPlatformnode.js
ParseplatformParse Dashboard Version7.4.0 Updatealpha.4 SwPlatformnode.js
ParseplatformParse Dashboard Version7.4.0 Updatealpha.5 SwPlatformnode.js
ParseplatformParse Dashboard Version7.5.0 Updatealpha.1 SwPlatformnode.js
ParseplatformParse Dashboard Version7.5.0 Updatealpha.2 SwPlatformnode.js
ParseplatformParse Dashboard Version7.6.0 Updatealpha.1 SwPlatformnode.js
ParseplatformParse Dashboard Version7.6.0 Updatealpha.10 SwPlatformnode.js
ParseplatformParse Dashboard Version7.6.0 Updatealpha.11 SwPlatformnode.js
ParseplatformParse Dashboard Version7.6.0 Updatealpha.12 SwPlatformnode.js
ParseplatformParse Dashboard Version7.6.0 Updatealpha.13 SwPlatformnode.js
ParseplatformParse Dashboard Version7.6.0 Updatealpha.2 SwPlatformnode.js
ParseplatformParse Dashboard Version7.6.0 Updatealpha.3 SwPlatformnode.js
ParseplatformParse Dashboard Version7.6.0 Updatealpha.4 SwPlatformnode.js
ParseplatformParse Dashboard Version7.6.0 Updatealpha.5 SwPlatformnode.js
ParseplatformParse Dashboard Version7.6.0 Updatealpha.6 SwPlatformnode.js
ParseplatformParse Dashboard Version7.6.0 Updatealpha.7 SwPlatformnode.js
ParseplatformParse Dashboard Version7.6.0 Updatealpha.8 SwPlatformnode.js
ParseplatformParse Dashboard Version7.6.0 Updatealpha.9 SwPlatformnode.js
ParseplatformParse Dashboard Version8.0.0 Updatealpha.1 SwPlatformnode.js
ParseplatformParse Dashboard Version8.0.0 Updatealpha.2 SwPlatformnode.js
ParseplatformParse Dashboard Version8.0.0 Updatealpha.3 SwPlatformnode.js
ParseplatformParse Dashboard Version8.0.0 Updatealpha.4 SwPlatformnode.js
ParseplatformParse Dashboard Version8.0.0 Updatealpha.5 SwPlatformnode.js
ParseplatformParse Dashboard Version8.0.0 Updatealpha.6 SwPlatformnode.js
ParseplatformParse Dashboard Version8.1.0 Updatealpha.1 SwPlatformnode.js
ParseplatformParse Dashboard Version8.1.0 Updatealpha.10 SwPlatformnode.js
ParseplatformParse Dashboard Version8.1.0 Updatealpha.11 SwPlatformnode.js
ParseplatformParse Dashboard Version8.1.0 Updatealpha.12 SwPlatformnode.js
ParseplatformParse Dashboard Version8.1.0 Updatealpha.13 SwPlatformnode.js
ParseplatformParse Dashboard Version8.1.0 Updatealpha.2 SwPlatformnode.js
ParseplatformParse Dashboard Version8.1.0 Updatealpha.3 SwPlatformnode.js
ParseplatformParse Dashboard Version8.1.0 Updatealpha.4 SwPlatformnode.js
ParseplatformParse Dashboard Version8.1.0 Updatealpha.5 SwPlatformnode.js
ParseplatformParse Dashboard Version8.1.0 Updatealpha.6 SwPlatformnode.js
ParseplatformParse Dashboard Version8.1.0 Updatealpha.7 SwPlatformnode.js
ParseplatformParse Dashboard Version8.1.0 Updatealpha.8 SwPlatformnode.js
ParseplatformParse Dashboard Version8.1.0 Updatealpha.9 SwPlatformnode.js
ParseplatformParse Dashboard Version8.1.1 Updatealpha.1 SwPlatformnode.js
ParseplatformParse Dashboard Version8.2.0 Updatealpha.1 SwPlatformnode.js
ParseplatformParse Dashboard Version8.2.0 Updatealpha.10 SwPlatformnode.js
ParseplatformParse Dashboard Version8.2.0 Updatealpha.11 SwPlatformnode.js
ParseplatformParse Dashboard Version8.2.0 Updatealpha.12 SwPlatformnode.js
ParseplatformParse Dashboard Version8.2.0 Updatealpha.13 SwPlatformnode.js
ParseplatformParse Dashboard Version8.2.0 Updatealpha.14 SwPlatformnode.js
ParseplatformParse Dashboard Version8.2.0 Updatealpha.15 SwPlatformnode.js
ParseplatformParse Dashboard Version8.2.0 Updatealpha.16 SwPlatformnode.js
ParseplatformParse Dashboard Version8.2.0 Updatealpha.17 SwPlatformnode.js
ParseplatformParse Dashboard Version8.2.0 Updatealpha.18 SwPlatformnode.js
ParseplatformParse Dashboard Version8.2.0 Updatealpha.19 SwPlatformnode.js
ParseplatformParse Dashboard Version8.2.0 Updatealpha.2 SwPlatformnode.js
ParseplatformParse Dashboard Version8.2.0 Updatealpha.20 SwPlatformnode.js
ParseplatformParse Dashboard Version8.2.0 Updatealpha.21 SwPlatformnode.js
ParseplatformParse Dashboard Version8.2.0 Updatealpha.22 SwPlatformnode.js
ParseplatformParse Dashboard Version8.2.0 Updatealpha.23 SwPlatformnode.js
ParseplatformParse Dashboard Version8.2.0 Updatealpha.24 SwPlatformnode.js
ParseplatformParse Dashboard Version8.2.0 Updatealpha.25 SwPlatformnode.js
ParseplatformParse Dashboard Version8.2.0 Updatealpha.26 SwPlatformnode.js
ParseplatformParse Dashboard Version8.2.0 Updatealpha.27 SwPlatformnode.js
ParseplatformParse Dashboard Version8.2.0 Updatealpha.3 SwPlatformnode.js
ParseplatformParse Dashboard Version8.2.0 Updatealpha.4 SwPlatformnode.js
ParseplatformParse Dashboard Version8.2.0 Updatealpha.5 SwPlatformnode.js
ParseplatformParse Dashboard Version8.2.0 Updatealpha.6 SwPlatformnode.js
ParseplatformParse Dashboard Version8.2.0 Updatealpha.7 SwPlatformnode.js
ParseplatformParse Dashboard Version8.2.0 Updatealpha.8 SwPlatformnode.js
ParseplatformParse Dashboard Version8.2.0 Updatealpha.9 SwPlatformnode.js
ParseplatformParse Dashboard Version8.3.0 Updatealpha.1 SwPlatformnode.js
ParseplatformParse Dashboard Version8.3.0 Updatealpha.10 SwPlatformnode.js
ParseplatformParse Dashboard Version8.3.0 Updatealpha.11 SwPlatformnode.js
ParseplatformParse Dashboard Version8.3.0 Updatealpha.12 SwPlatformnode.js
ParseplatformParse Dashboard Version8.3.0 Updatealpha.13 SwPlatformnode.js
ParseplatformParse Dashboard Version8.3.0 Updatealpha.14 SwPlatformnode.js
ParseplatformParse Dashboard Version8.3.0 Updatealpha.15 SwPlatformnode.js
ParseplatformParse Dashboard Version8.3.0 Updatealpha.16 SwPlatformnode.js
ParseplatformParse Dashboard Version8.3.0 Updatealpha.17 SwPlatformnode.js
ParseplatformParse Dashboard Version8.3.0 Updatealpha.18 SwPlatformnode.js
ParseplatformParse Dashboard Version8.3.0 Updatealpha.19 SwPlatformnode.js
ParseplatformParse Dashboard Version8.3.0 Updatealpha.2 SwPlatformnode.js
ParseplatformParse Dashboard Version8.3.0 Updatealpha.20 SwPlatformnode.js
ParseplatformParse Dashboard Version8.3.0 Updatealpha.21 SwPlatformnode.js
ParseplatformParse Dashboard Version8.3.0 Updatealpha.22 SwPlatformnode.js
ParseplatformParse Dashboard Version8.3.0 Updatealpha.23 SwPlatformnode.js
ParseplatformParse Dashboard Version8.3.0 Updatealpha.24 SwPlatformnode.js
ParseplatformParse Dashboard Version8.3.0 Updatealpha.25 SwPlatformnode.js
ParseplatformParse Dashboard Version8.3.0 Updatealpha.26 SwPlatformnode.js
ParseplatformParse Dashboard Version8.3.0 Updatealpha.27 SwPlatformnode.js
ParseplatformParse Dashboard Version8.3.0 Updatealpha.28 SwPlatformnode.js
ParseplatformParse Dashboard Version8.3.0 Updatealpha.29 SwPlatformnode.js
ParseplatformParse Dashboard Version8.3.0 Updatealpha.3 SwPlatformnode.js
ParseplatformParse Dashboard Version8.3.0 Updatealpha.30 SwPlatformnode.js
ParseplatformParse Dashboard Version8.3.0 Updatealpha.31 SwPlatformnode.js
ParseplatformParse Dashboard Version8.3.0 Updatealpha.32 SwPlatformnode.js
ParseplatformParse Dashboard Version8.3.0 Updatealpha.33 SwPlatformnode.js
ParseplatformParse Dashboard Version8.3.0 Updatealpha.34 SwPlatformnode.js
ParseplatformParse Dashboard Version8.3.0 Updatealpha.35 SwPlatformnode.js
ParseplatformParse Dashboard Version8.3.0 Updatealpha.36 SwPlatformnode.js
ParseplatformParse Dashboard Version8.3.0 Updatealpha.37 SwPlatformnode.js
ParseplatformParse Dashboard Version8.3.0 Updatealpha.38 SwPlatformnode.js
ParseplatformParse Dashboard Version8.3.0 Updatealpha.39 SwPlatformnode.js
ParseplatformParse Dashboard Version8.3.0 Updatealpha.4 SwPlatformnode.js
ParseplatformParse Dashboard Version8.3.0 Updatealpha.40 SwPlatformnode.js
ParseplatformParse Dashboard Version8.3.0 Updatealpha.41 SwPlatformnode.js
ParseplatformParse Dashboard Version8.3.0 Updatealpha.42 SwPlatformnode.js
ParseplatformParse Dashboard Version8.3.0 Updatealpha.43 SwPlatformnode.js
ParseplatformParse Dashboard Version8.3.0 Updatealpha.5 SwPlatformnode.js
ParseplatformParse Dashboard Version8.3.0 Updatealpha.6 SwPlatformnode.js
ParseplatformParse Dashboard Version8.3.0 Updatealpha.7 SwPlatformnode.js
ParseplatformParse Dashboard Version8.3.0 Updatealpha.8 SwPlatformnode.js
ParseplatformParse Dashboard Version8.3.0 Updatealpha.9 SwPlatformnode.js
ParseplatformParse Dashboard Version8.4.0 Updatealpha.1 SwPlatformnode.js
ParseplatformParse Dashboard Version8.4.1 Updatealpha.1 SwPlatformnode.js
ParseplatformParse Dashboard Version8.4.1 Updatealpha.2 SwPlatformnode.js
ParseplatformParse Dashboard Version8.5.0 Updatealpha.1 SwPlatformnode.js
ParseplatformParse Dashboard Version8.5.0 Updatealpha.2 SwPlatformnode.js
ParseplatformParse Dashboard Version8.5.0 Updatealpha.3 SwPlatformnode.js
ParseplatformParse Dashboard Version8.5.0 Updatealpha.4 SwPlatformnode.js
ParseplatformParse Dashboard Version8.5.0 Updatealpha.5 SwPlatformnode.js
ParseplatformParse Dashboard Version8.5.0 Updatealpha.6 SwPlatformnode.js
ParseplatformParse Dashboard Version8.5.0 Updatealpha.7 SwPlatformnode.js
ParseplatformParse Dashboard Version9.0.0 Updatealpha.1 SwPlatformnode.js
ParseplatformParse Dashboard Version9.0.0 Updatealpha.2 SwPlatformnode.js
ParseplatformParse Dashboard Version9.0.0 Updatealpha.3 SwPlatformnode.js
ParseplatformParse Dashboard Version9.0.0 Updatealpha.4 SwPlatformnode.js
ParseplatformParse Dashboard Version9.0.0 Updatealpha.5 SwPlatformnode.js
ParseplatformParse Dashboard Version9.0.0 Updatealpha.6 SwPlatformnode.js
ParseplatformParse Dashboard Version9.0.0 Updatealpha.7 SwPlatformnode.js
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 0.34% 0.253
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
nvd@nist.gov 5.3 1.6 3.6
CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N
security-advisories@github.com 7 0 0
CVSS:4.0/AV:N/AC:H/AT:P/PR:L/UI:N/VC:N/VI:H/VA:N/SC:N/SI:H/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
CWE-1289 Improper Validation of Unsafe Equivalence in Input

The product receives an input value that is used as a resource identifier or other type of reference, but it does not validate or incorrectly validates that the input is equivalent to a potentially-unsafe value.

https://github.com/parse-community/parse-dashboard/releases/tag/9.0.0-alpha.8
Release Notes
https://github.com/parse-community/parse-dashboard/commit/f92a9ef5246d57e51696bd881a15f3b133b2bb50
Patch
https://github.com/parse-community/parse-dashboard/security/advisories/GHSA-jhp4-jvq3-w5xr
Vendor Advisory