PT-2024-6951

Name of the Vulnerable Software and Affected Versions Arc versions prior to 2024-08-26 Description Remote code execution is possible in JavaScript boosts due to misconfigured Firebase Access Control Lists ACLs. This flaw allows an attacker to create or update a boost using another user's ID, whic...