Jerome Gamez Firebase Admin SDK for PHP version from 3.2.0 to 3.8.0 contains a Incorrect Access Control vulnerability in src/Firebase/Auth/IdTokenVerifier.php does not verify for token signature that can result in JWT wi…
CVSS 3.0HIGH 8.1·Network·No auth·No interaction·EPSS 0.0131·Published 2018-02-09·Fixed in 3.8.1CWE-732