firebase credentials leaks @ ███████
Medium
M
MTN Group
Submitted None
Actions:
Reported by
aliyugombe
Vulnerability Details
Technical details and impact analysis
Hello.
I found firebase credentials leaks at ████.
## Steps To Reproduce:
Visit █████ >> Right click >> view source code.
## Supporting Material/References:
<script>
// Your web app's Firebase configuration
// For Firebase JS SDK v7.20.0 and later, measurementId is optional
var firebaseConfig = {
apiKey: "AIzaSyBZtK5_-J1DFWLBFpLBIOkeK9D8ZDfqJ3g",
authDomain: "██████",
databaseURL: "█████",
projectId: "quizgame-4f2e3",
storageBucket: "██████",
messagingSenderId: "██████████",
appId: "1:████████:web:923994d50811422213a052",
measurementId: "G-N94D6VRGVG"
};
// Initialize Firebase
firebase.initializeApp(firebaseConfig);
firebase.analytics();
</script>
## Impact
Un authorize access to firebase database.
Kind regard
@█████████
Report Details
Additional information and metadata
State
Closed
Substate
Resolved
Submitted
Weakness
Information Disclosure