CVE-2022-24901

    Dashboard / Vulnerabilities / CVE-2022-24901

    CVE-2022-24901

    Published: 4 May 2022Last Modified: 12 Aug 2026

    Summary: Authentication bypass and denial of service (DoS) vulnerabilities in Apple Game Center auth adapter

    Details: Improper validation of the Apple certificate URL in the Apple Game Center authentication adapter allows attackers to bypass authentication, making the server vulnerable to DoS attacks. The vulnerability has been fixed by improving the URL validation and adding additional checks of the resource the URL points to before downloading it.

    References: https://github.com/CVEProject/cvelistV5/tree/main/cves/2022/24xxx/CVE-2022-24901.json, https://github.com/parse-community/parse-server/security/advisories/GHSA-qf8x-vqjv-92gr, https://nvd.nist.gov/vuln/detail/CVE-2022-24901

    Affected packages

    Package

    Name:

    Purl:

    Affected ranges

    Type: GIT

    Events:

    Introduced- 0
    Fixed -b00b0410e672995f72c781d9874765898ecbc793

    Affected versions

    4.10.9
    4.10.8
    4.10.7
    4.10.6
    4.10.5
    4.10.4
    4.10.3
    4.10.2
    4.10.1
    4.10.0

    Common Vulnerability Scoring System

    Attack Vector
    Network
    Adjacent
    Local
    Physical
    Privileges Required
    None
    Low
    High
    User Interaction
    None
    Required
    Scope
    Unchanged
    Changed
    Confidentiality
    None
    Low
    High
    Integrity
    None
    Low
    High
    Availability
    None
    Low
    High
    CVE-2022-24901 | CVE-DB