Parse Server 9.0.0 before 9.10.1 Protected Fields Disclosure via LiveQuery
Parse Server is an open-source backend server. In versions >= 9.0.0 and < 9.10.1-alpha.8, and in versions < 8.6.89, LiveQuery evaluates the protectedFields class-level permission against an incompletely resolved calle…