Vendor
Brushfire
1 known vulnerabilities.
Products
1 result · Clear filters · Feed
-
Medium 5.3
Brushfire unauthenticated information disclosure
The Brushfire platform's video content streaming application (https://online.brushfire.com) exposes database path in requests to users, allowing a remote, unauthenticated attacker to read information about other users. Fixed February 2026.