MTN Group · Report #1351326
firebase credentials leaks @ ███████
Validstatus
mediumseverity
7upvotes
5 Sept 2022disclosed
How it was found
Hello. I found firebase credentials leaks at ████.
Steps To Reproduce:
Visit █████ >> Right click >> view source code.
Supporting Material/References:
<script> // Your web app's Firebase configuration // For Firebase JS SDK v7.20.0 and later, measurementId is optional var firebaseConfig = { apiKey: "██████", authDomain: "██████", databaseURL: "█████", projectId: "█████████", storageBucket: "██████", messagingSenderId: "██████████", appId: "█████████", measurementId: "█████" }; // Initialize Firebase firebase.initializeApp(firebaseConfig); firebase.analytics(); </script>Impact
Un authorize access to firebase database.
Kind regard @█████████