Skip to content
OpenAdvisories

Product · Firebase

JavaScript SDK

1 known vulnerabilities.

All Critical High Medium Low Exploited only

1 result · Feed

  • Medium 5.2
    CVE-2024-11023

    Session Hijacking in Firebase JavaScript SDK

    Firebase JavaScript SDK utilizes a "FIREBASE_DEFAULTS" cookie to store configuration data, including an "_authTokenSyncURL" field used for session synchronization. If this cookie field is preset via an attacker by any other method, the attacker can manipulate…

    Firebase JavaScript SDK firebase npm