Skip to content
OpenAdvisories

Product · Erudika

para

2 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • Medium 6.2
    CVE-2025-49009

    Para Inserts Sensitive Information into Log File for Facebook authentication

    Para is a multitenant backend server/framework for object persistence and retrieval. A vulnerability that exists in versions prior to 1.50.8 in `FacebookAuthFilter.java` results in a full request URL being logged during a failed request to a Facebook user pro…

    Erudika para com.erudika:para-server Maven
  • Medium 6.2
    CVE-2025-48955

    Para Server Logs Sensitive Information

    Para is a multitenant backend server/framework for object persistence and retrieval. A vulnerability that exists in versions prior to 1.50.8 exposes both access and secret keys in logs without redaction. These credentials are later reused in variable assignme…

    Erudika para com.erudika:para-server Maven