GHSA-3wf4-68gx-mph8MediumCVSS 5.3
Firebase JavaScript SDK allows attackers to manipulate the "_authTokenSyncURL" to point to their own server
🔗 CVE IDs covered (1)
📋 Description
Firebase JavaScript SDK utilizes a "FIREBASE_DEFAULTS" cookie to store configuration data, including an "_authTokenSyncURL" field used for session synchronization. If this cookie field is preset via an attacker by any other method, the attacker can manipulate the "_authTokenSyncURL" to point to their own server and it would allow am actor to capture user session data transmitted by the SDK. We recommend upgrading Firebase JS SDK at least to 10.9.0.
🎯 Affected products1
- npm/firebase:< 10.9.0
🔗 References (5)
- https://nvd.nist.gov/vuln/detail/CVE-2024-11023
- https://github.com/firebase/firebase-js-sdk/pull/8056
- https://firebase.google.com/support/release-notes/js#version_1090_-_march_14_2024
- https://github.com/firebase/firebase-js-sdk/commit/245dd26e19b6c16aca7e1b7e597ed5784c2984ba
- https://github.com/advisories/GHSA-3wf4-68gx-mph8