Description (CNA)
A potential logging of the firestore key via logging within nodejs-firestore exists - Developers who were logging objects through this._settings would be logging the firestore key as well potentially exposing it to anyone with logs read access. We recommend upgrading to version 6.1.0 to avoid this issue
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| Google / nodejs-firestore | affected 0 before 6.1.0 |
CWE
CWE-922
References
- https://github.com/googleapis/nodejs-firestore/pull/1742
- https://bughunters.google.com/reports/vrp/KNvgo1Wij
ADP enrichment
No English description supplied.