Firebase credentials leak

How it was found

Summary:

This report is regarding the fix of #1351329. The fix is not patched fully, comments are visible to anyone and an attacker can utilize this for further attacks.

Steps To Reproduce:

go to : view-source:https://mpulse.mtn.ng/ search for 'Initialize Firebase'

as you can see the firebase details are commented.

Supporting Material/References:

POC attached

Impact

Unauthorized access to firebase