CVE-2024-54294

Summary

CVE-2024-54294 is a newly disclosed vulnerability affecting Firebase OTP Authentication. This issue allows for authentication bypass, enabling unauthorized access to user accounts. The bypass occurs through an alternate path or channel, making standard authentication methods ineffective. Firebase OTP Authentication versions from n/a to 1.0.1 have been identified as vulnerable to this exploit. This vulnerability poses a significant risk to user data security and must be addressed promptly by affected organizations.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.