firebase credentials leaks @ ███████
Medium
Vulnerability Details
Hello.
I found firebase credentials leaks at ████.
## Steps To Reproduce:
Visit █████ >> Right click >> view source code.
## Supporting Material/References:
<script>
// Your web app's Firebase configuration
// For Firebase JS SDK v7.20.0 and later, measurementId is optional
var firebaseConfig = {
apiKey: "AIzaSyBZtK5_-J1DFWLBFpLBIOkeK9D8ZDfqJ3g",
authDomain: "██████",
databaseURL: "█████",
projectId: "quizgame-4f2e3",
storageBucket: "██████",
messagingSenderId: "██████████",
appId: "1:████████:web:923994d50811422213a052",
measurementId: "G-N94D6VRGVG"
};
// Initialize Firebase
firebase.initializeApp(firebaseConfig);
firebase.analytics();
</script>
## Impact
Un authorize access to firebase database.
Kind regard
@█████████
Actions
View on HackerOneReport Stats
- Report ID: 1351326
- State: Closed
- Substate: resolved
- Upvotes: 4