PatchTheCVEfirebase javascript sdk vulnerabilities and fixes
Recent CVEs affecting firebase javascript sdk, with upgrade or downgrade steps. 1 tracked.
Also searched as: firebasejavascriptsdk.
firebase javascript sdk has 1 tracked vulnerability, 0 critical. A fixed release or vendor patch exists for 1. Most recent: 2024-11-18. Highest priority: CVE-2024-11023 (score 22/100).
- CVE-2024-11023 MEDIUM 6.1 UPGRADE Firebase JavaScript SDK utilizes a "FIREBASE_DEFAULTS" cookie to store configuration data, including an "_auth
FAQ
How do I fix firebase javascript sdk vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is firebase javascript sdk being exploited right now?
None of the tracked firebase javascript sdk CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which firebase javascript sdk CVE should I patch first?
CVE-2024-11023 currently ranks highest (22/100): Firebase JavaScript SDK utilizes a "FIREBASE_DEFAULTS" cookie to store configuration data, including an "_auth.