CVE-2023-6460 | BDVDB-2026-218237 Detail
Googlenodejs-firestore
Description#
A potential logging of the firestore key via logging within nodejs-firestore exists - Developers who were logging objects through this._settings would be logging the firestore key as well potentially exposing it to anyone with logs read access. We recommend upgrading to version 6.1.0 to avoid this issue
Impact#
CAPEC-131 Resource Leak Exposure
Weaknesses#
- CWE-922 Insecure Storage of Sensitive Information
References#
Exploit#
No public exploit known
History#
- Version 1Record published in the CVE List.
- Version 2Most recent update recorded in the CVE List.