Skip to content
OpenAdvisories

Package · Packagist

kreait/firebase-php

1 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • High 8.1
    CVE-2018-1000025

    Jerome Gamez Firebase Admin SDK for PHP Incorrect Access Control vulnerability

    Jerome Gamez Firebase Admin SDK for PHP version from 3.2.0 to 3.8.0 contains a Incorrect Access Control vulnerability in src/Firebase/Auth/IdTokenVerifier.php does not verify for token signature that can result in JWT with any email address and user ID could …

    kreait/firebase-php Packagist