14 matches found
CVE-2026-47364
In versions of the Datadog Android application prior to v545-5.9.2, the app tags Crashlytics data with the user's Datadog UUID, with no user-facing opt-out. Impact: The Datadog user UUID and crash data are visible within Firebase Crashlytics. This UUID is not identifying outside Datadog's own...
CVE-2026-47364
Summary of CVE-2026-47364 : The Datadog Android app, on every successful login, calls FirebaseCrashlytics.setUserId with the signed-in Datadog UUID (a stable per-user identifier) and ties it to the device’s Firebase installation ID on Google’s backend. Separately, uncaught exceptions are forwarde...
CVE-2026-47364
In versions of the Datadog Android application prior to v545-5.9.2, the app tags Crashlytics data with the user's Datadog UUID, with no user-facing opt-out. Impact: The Datadog user UUID and crash data are visible within Firebase Crashlytics. This UUID is not identifying outside Datadog's own...
CVE-2026-47364
In versions of the Datadog Android application prior to v545-5.9.2, the app tags Crashlytics data with the user's Datadog UUID, with no user-facing opt-out. Impact: The Datadog user UUID and crash data are visible within Firebase Crashlytics. This UUID is not identifying outside Datadog's own...
EUVD-2026-54569
In versions of the Datadog Android application prior to v545-5.9.2, the app tags Crashlytics data with the user's Datadog UUID, with no user-facing opt-out. Impact: The Datadog user UUID and crash data are visible within Firebase Crashlytics. This UUID is not identifying outside Datadog's own...
CVE-2026-47364
In versions of the Datadog Android application prior to v545-5.9.2, the app tags Crashlytics data with the user's Datadog UUID, with no user-facing opt-out. Impact: The Datadog user UUID and crash data are visible within Firebase Crashlytics. This UUID is not identifying outside Datadog's own...
EUVD-2014-0678
Malware in sbrugna...
X (Formerly Twitter): HTML/XSS rendered in Android App of Crashlytics through fabric.io
Hey hi, While in fabric , the app name is rendered as HTML/XSS in android app of Crashlytics like shown in the screenshot. Steps to reproduce: Create an app with the name of payload in my case i have used, " under the following URL...
Twitter Launches Digits – A Password Free Login Service For App Developers
There’s a good news for app developers. On Wednesday at Twitter’s first annual developer conference Flight, the company announced a new tool for developers which will allow users to log-in to mobile applications using their phone numbers rather than a traditional username and password combination...
X (Formerly Twitter): CSRF in crashlytics.com
Hello Sir This is N B Sri Harsha I Have Found An CSRF in http://try.crashlytics.com/ POC ;-...
Design/Logic Flaw
The Starbucks 2.6.1 application for iOS stores sensitive information in plaintext in the Crashlytics log file /Library/Caches/com.crashlytics.data/com.starbucks.mystarbucks/session.clslog, which allows attackers to discover usernames, passwords, and e-mail addresses via an application that reads...
[CVE-2014-0647] Insecure Data Storage of User Data Elements in Starbucks v2.6.1 iOS mobile application
Title: CVE-2014-0647 Insecure Data Storage of User Data Elements in Starbucks v2.6.1 iOS mobile application Published: January 13, 2014 Reported to Vendor: December 2013 no direct response CVE Reference: CVE-2014-0647 Credit: This issue was discovered by Daniel E. Wood...
Starbucks Mobile App Vulnerability Puts Data At Risk
A vulnerability in Starbucks’ mobile app could be putting coffee drinkers’ information–including their usernames, email addresses and passwords–at risk. The problem stems from the way session.clslog, the Crashlytics log file, handles those credentials in the event of a crash. Within the file ther...
Starbucks 2.6.1 Information Disclosure
Title: CVE-2014-0647 Insecure Data Storage of User Data Elements in Starbucks v2.6.1 iOS mobile application Published: January 13, 2014 Reported to Vendor: December 2013 no direct response CVE Reference: CVE-2014-0647 Credit: This issue was discovered by Daniel E. Wood...