CVE-2018-1000025

Packagist/kreait/firebase-php CVE-2018-1000025: high 8.1, EPSS 1.31%

Jerome Gamez Firebase Admin SDK for PHP Incorrect Access Control vulnerability

Action: Upgrade kreait/firebase-php to 3.8.1 or later.

composer require kreait/firebase-php:3.8.1

Affected

Fixed versions

Sources

• osv: GHSA-4gjj-r7w8-42cq
• https://nvd.nist.gov/vuln/detail/CVE-2018-1000025
• https://github.com/kreait/firebase-php/pull/151
• https://github.com/FriendsOfPHP/security-advisories/blob/master/kreait/firebase-php/CVE-2018-1000025.yaml
• https://github.com/kreait/firebase-php
• https://github.com/kreait/firebase-php/releases/tag/3.8.1

CVE-2018-1000025 · published 2022-05-13T01:48:29Z · modified 2024-04-24T18:57:22.165952Z · JSON