Início
Início
Tendências
Tendências
Vulnerabilidades
Vulnerabilidades
Notícias
Notícias
Pesquisadores
Pesquisadores
Por que dbugs?
Por que dbugs?
Configurações

Abhishekwebcode

#55014de 56,326
4CVSS total
Vulnerabilidades · 1
PT-2023-32673
4.0
2023-12-04
Unknown · Nodejs-Firestore · CVE-2023-6460
**Name of the Vulnerable Software and Affected Versions** nodejs-firestore versions prior to 6.1.0 **Description** A potential logging issue exists within nodejs-firestore, where developers logging objects through `this. settings` may inadvertently log the firestore key, potentially exposing it to anyone with logs read access. **Recommendations** For versions prior to 6.1.0, upgrade to version 6.1.0 to avoid this issue. As a temporary workaround, consider avoiding the logging of objects through `this. settings` to minimize the risk of exposing the firestore key.