Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
friendsofphpOpenJS FoundationFRIENDSOFPHP:KREAIT
HistoryJan 16, 2018 - 10:51 a.m.

Incorrect Access Control vulnerability in src/Firebase/Auth/IdTokenVerifier.php does not verify for token signature that can result in JWT with any email address and user ID could be forged from an actual token, or from thin air.

2018-01-1610:51:00
OpenJS Foundation
github.com
7

0.002 Low

EPSS

Percentile

64.8%

JSON

Bugfixes Fixed a security issue discovered by @hernandev that enabled an attacker to impersonate any registered user in a Firebase application.

CPENameOperatorVersion
kreait/firebase-phplt3.8.1

Related

nvd 1
cve 1
prion 1
osv 2
cvelist 1
github 1
friendsofphp 1
nvd
nvd
CVE-2018-1000025
2018-02-09 23:29:00
cve
cve
CVE-2018-1000025
2018-02-09 23:29:00
prion
prion
Improper access control
2018-02-09 23:29:00
osv
osv
Jerome Gamez Firebase Admin SDK for PHP Incorrect Access Control vulnerability
2022-05-13 01:48:29
CVE-2018-1000025
2018-02-09 23:29:00
cvelist
cvelist
CVE-2018-1000025
2018-02-09 23:00:00
github
github
Jerome Gamez Firebase Admin SDK for PHP Incorrect Access Control vulnerability
2022-05-13 01:48:29
friendsofphp
friendsofphp
Incorrect Access Control vulnerability in src/Firebase/Auth/IdTokenVerifier.php does not verify for token signature that can result in JWT with any email address and user ID could be forged from an actual token, or from thin air.
2018-01-16 10:51:00

0.002 Low

EPSS

Percentile

64.8%

JSON
Related for FRIENDSOFPHP:KREAIT
nvd1cve1prion1osv2cvelist1github1friendsofphp1