Skip to content
OpenAdvisories

Vendor

Firebase

2 known vulnerabilities.

Products

JavaScript SDK 1 firebase-tools 1
All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Medium 5.2
    CVE-2024-11023

    Session Hijacking in Firebase JavaScript SDK

    Firebase JavaScript SDK utilizes a "FIREBASE_DEFAULTS" cookie to store configuration data, including an "_authTokenSyncURL" field used for session synchronization. If this cookie field is preset via an attacker by any other method, the attacker can manipulate…

    Firebase JavaScript SDK firebase npm