Home
Home
Trends
Trends
Vulnerabilities
Vulnerabilities
News
News
Researchers
Researchers
Why dbugs?
Why dbugs?
Settings

Abhishekwebcode

#54994of 56,326
4Total CVSS
Vulnerabilities · 1
PT-2023-32673
4.0
2023-12-04
Unknown · Nodejs-Firestore · CVE-2023-6460
**Name of the Vulnerable Software and Affected Versions** nodejs-firestore versions prior to 6.1.0 **Description** A potential logging issue exists within nodejs-firestore, where developers logging objects through `this. settings` may inadvertently log the firestore key, potentially exposing it to anyone with logs read access. **Recommendations** For versions prior to 6.1.0, upgrade to version 6.1.0 to avoid this issue. As a temporary workaround, consider avoiding the logging of objects through `this. settings` to minimize the risk of exposing the firestore key.