Home
Trends
Vulnerabilities
News
Researchers
Why dbugs?

Abhishekwebcode

#45192of 53,622
5.5Total CVSS
Vulnerabilities · 1
PT-2023-32673
5.5
2023-12-04
Unknown · Nodejs-Firestore · CVE-2023-6460
**Name of the Vulnerable Software and Affected Versions** nodejs-firestore versions prior to 6.1.0 **Description** A potential logging issue exists within nodejs-firestore, where developers logging objects through `this. settings` may inadvertently log the firestore key, potentially exposing it to anyone with logs read access. **Recommendations** For versions prior to 6.1.0, upgrade to version 6.1.0 to avoid this issue. As a temporary workaround, consider avoiding the logging of objects through `this. settings` to minimize the risk of exposing the firestore key.