5.2.6
parseplatformorg
released this
20 Sep 00:27
·
900 commits
to release
since this release
5.2.6 (2022-09-20)
Bug Fixes
- session object properties can be updated by foreign user; this fixes a security vulnerability in which a foreign user can write to the session object of another user if the session object ID is known; the fix prevents writing to foreign session objects (GHSA-6w4q-23cf-j9jp) (#8182) (6d0b2f5)