Firebase misconfiguration

Firebase misconfiguration

TL;DR: Public-read realtime DB at .firebaseio.com; unauthenticated REST API access to entire datastore.

Stub — to be filled in.

What it is

TODO

Preconditions / where it applies

TODO

Technique

TODO

Detection and defence

TODO

References

  • TODO