Monday 13 November 2017

Should I be having unauthorized read access on a database?

Hello there!I started to look at an eCommerce Website, and I noticed that I have read access to their Firebase Database via their key, which they have unencrypted in their [something].js file.Is that supposed to be intended? Shouldn't it be any form of authentication preventing anyone to read their database?Cheers, Francesco

Submitted November 13, 2017 at 09:01AM by DrSghe

No comments:

Post a Comment