Staging Environment: Content and features may be unstable or change without notice.
Search for vulnerabilities
Vulnerability details: VCID-8b7x-1h3z-xkf1
Vulnerability ID VCID-8b7x-1h3z-xkf1
Aliases CVE-2021-39138
GHSA-23r4-5mxp-c7g5
Summary
Status Published
Exploitability 0.5
Weighted Severity 6.2
Risk 3.1
Affected and Fixed Packages Package Details
Weaknesses (4)
CWE-287 Improper Authentication
CWE-863 Incorrect Authorization
CWE-1035 OWASP Top Ten 2017 Category A9 - Using Components with Known Vulnerabilities
CWE-937 OWASP Top Ten 2013 Category A9 - Using Components with Known Vulnerabilities
System Score Found at
epss 0.00218 https://api.first.org/data/v1/epss?cve=CVE-2021-39138
epss 0.00218 https://api.first.org/data/v1/epss?cve=CVE-2021-39138
cvssv3.1_qr MODERATE https://github.com/advisories/GHSA-23r4-5mxp-c7g5
cvssv3.1 4.8 https://github.com/parse-community/parse-server
generic_textual MODERATE https://github.com/parse-community/parse-server
cvssv3.1 4.8 https://github.com/parse-community/parse-server/commit/147bd9a3dc43391e92c36e05d5db860b04ca27db
generic_textual MODERATE https://github.com/parse-community/parse-server/commit/147bd9a3dc43391e92c36e05d5db860b04ca27db
cvssv3.1 4.8 https://github.com/parse-community/parse-server/releases/tag/4.5.2
generic_textual MODERATE https://github.com/parse-community/parse-server/releases/tag/4.5.2
cvssv3.1 4.8 https://github.com/parse-community/parse-server/security/advisories/GHSA-23r4-5mxp-c7g5
cvssv3.1_qr MODERATE https://github.com/parse-community/parse-server/security/advisories/GHSA-23r4-5mxp-c7g5
generic_textual MODERATE https://github.com/parse-community/parse-server/security/advisories/GHSA-23r4-5mxp-c7g5
cvssv3.1 4.8 https://nvd.nist.gov/vuln/detail/CVE-2021-39138
generic_textual MODERATE https://nvd.nist.gov/vuln/detail/CVE-2021-39138
Reference id Reference type URL
https://api.first.org/data/v1/epss?cve=CVE-2021-39138
https://github.com/parse-community/parse-server
https://github.com/parse-community/parse-server/commit/147bd9a3dc43391e92c36e05d5db860b04ca27db
https://github.com/parse-community/parse-server/releases/tag/4.5.2
https://github.com/parse-community/parse-server/security/advisories/GHSA-23r4-5mxp-c7g5
https://nvd.nist.gov/vuln/detail/CVE-2021-39138
GHSA-23r4-5mxp-c7g5 https://github.com/advisories/GHSA-23r4-5mxp-c7g5
No exploits are available.
Vector: CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N Found at https://github.com/parse-community/parse-server
Attack Vector (AV) Attack Complexity (AC) Privileges Required (PR) User Interaction (UI) Scope (S) Confidentiality Impact (C) Integrity Impact (I) Availability Impact (A)

network

adjacent_network

local

physical

low

high

none

low

high

none

required

unchanged

changed

high

low

none

high

low

none

high

low

none
Vector: CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N Found at https://github.com/parse-community/parse-server/commit/147bd9a3dc43391e92c36e05d5db860b04ca27db
Attack Vector (AV) Attack Complexity (AC) Privileges Required (PR) User Interaction (UI) Scope (S) Confidentiality Impact (C) Integrity Impact (I) Availability Impact (A)

network

adjacent_network

local

physical

low

high

none

low

high

none

required

unchanged

changed

high

low

none

high

low

none

high

low

none
Vector: CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N Found at https://github.com/parse-community/parse-server/releases/tag/4.5.2
Attack Vector (AV) Attack Complexity (AC) Privileges Required (PR) User Interaction (UI) Scope (S) Confidentiality Impact (C) Integrity Impact (I) Availability Impact (A)

network

adjacent_network

local

physical

low

high

none

low

high

none

required

unchanged

changed

high

low

none

high

low

none

high

low

none
Vector: CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N Found at https://github.com/parse-community/parse-server/security/advisories/GHSA-23r4-5mxp-c7g5
Attack Vector (AV) Attack Complexity (AC) Privileges Required (PR) User Interaction (UI) Scope (S) Confidentiality Impact (C) Integrity Impact (I) Availability Impact (A)

network

adjacent_network

local

physical

low

high

none

low

high

none

required

unchanged

changed

high

low

none

high

low

none

high

low

none
Vector: CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N Found at https://nvd.nist.gov/vuln/detail/CVE-2021-39138
Attack Vector (AV) Attack Complexity (AC) Privileges Required (PR) User Interaction (UI) Scope (S) Confidentiality Impact (C) Integrity Impact (I) Availability Impact (A)

network

adjacent_network

local

physical

low

high

none

low

high

none

required

unchanged

changed

high

low

none

high

low

none

high

low

none
Exploit Prediction Scoring System (EPSS)
Percentile 0.44453
EPSS Score 0.00218
Published At June 11, 2026, 12:55 p.m.
Date Actor Action Source VulnerableCode Version
2026-06-12T02:02:15.150686+00:00 EPSS Importer Import https://epss.cyentia.com/epss_scores-current.csv.gz 38.6.0