CVSS base score
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
What the vulnerability does
Authentication Bypass Using an Alternate Path or Channel vulnerability in Appgenix Infotech Firebase OTP Authentication authentication-via-otp-using-firebase allows Authentication Bypass.This issue affects Firebase OTP Authentication: from n/a through <= 1.0.1.
Explanation of Vulnerability in Simple Terms
Firebase OTP Authentication versions 1.0.1 and earlier contain an authentication bypass vulnerability. An attacker can gain full access to the application without valid credentials. The vulnerability requires no user interaction and can be exploited remotely over the network. All installations should update immediately.
What an attacker can do
Bypass authentication and gain full access to the application without valid credentials.
Potential impact on your site
Attackers can read, modify, or delete all data and take complete control of the site.
Conditions required to exploit
Network access to the application; no authentication or user interaction required.
Key dates
External resources
Related vulnerabilities
