CVE-2024-4128
2 advisories.
Go/github.com/firebase/firebase-tools CVE-2024-4128: unknown
CSRF in firebase-tools emulator suite in github.com/firebase/firebase-tools
Action: No fix published. Pin and monitor.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | - | - |
Fixed versions
No fixed version in the source.
Sources
- osv: GO-2024-2808
- https://nvd.nist.gov/vuln/detail/CVE-2024-4128
- https://github.com/firebase/firebase-tools/commit/068a2b08dc308c7ab4b569617f5fc8821237e3a0
- https://github.com/firebase/firebase-tools/pull/6944
CVE-2024-4128 · published · modified · JSON
npm/firebase-tools CVE-2024-4128: low 2.6
Firebase vulnerable to CRSF attack
Action: Upgrade firebase-tools to 13.6.0 or later.
npm i firebase-tools@13.6.0Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 13.6.0 | - |
Fixed versions
| 13.6.0 |
Sources
- osv: GHSA-rcm2-22f3-pqv3
- https://nvd.nist.gov/vuln/detail/CVE-2024-4128
- https://github.com/firebase/firebase-tools/pull/6944
- https://github.com/firebase/firebase-tools/commit/068a2b08dc308c7ab4b569617f5fc8821237e3a0
- https://github.com/firebase/firebase-tools
CVE-2024-4128 · published · modified · JSON