CVE-2018-13850

2018-07-1018:00:00

mitre

www.cve.org

AI Score

9.6

Confidence

High

EPSS

0.002

Percentile

59.4%

JSON

The “Firebase Cloud Messaging (FCM) + Advance Admin Panel” component supporting Firebase Push Notification on iOS (through 2017-10-26) allows SQL injection via the /advance_push/public/login username parameter.

References

cxsecurity.com/issue/WLB-2018070096