Lucene search

PRIOn knowledge basePRION:CVE-2023-6460

HistoryDec 04, 2023 - 1:15 p.m.

Code injection

2023-12-0413:15:00

PRIOn knowledge base

www.prio-n.com

code injection

logging

firestore key

nodejs

security update

nvd

7.1 High

AI Score

Confidence

Low

0.0004 Low

EPSS

Percentile

9.0%

JSON

A potential logging of the firestore key via logging within nodejs-firestore exists - Developers who were logging objects through this._settings would be logging the firestore key as well potentially exposing it to anyone with logs read access. We recommend upgrading to version 6.1.0 to avoid this issue

CPENameOperatorVersion
cloud_firestorelt6.1.0

CPE	Name	Operator	Version
	cloud_firestore	lt	6.1.0

References

github.com/googleapis/nodejs-firestore/pull/1742