Approved changes feed: RSS · Atom

cpe:2.3:a:google_cloud:firebase_studio:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorGoogle Cloud (34bf7c79-23c3-583b-8203-6d0252c54ec0)
ProductFirebase Studio (adcaf864-4e47-5c5f-99dc-f06ee256e240)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2026-12715 vulnerable 2026-07-29 00:23:32.529125 Missing Authorization in Firebase Studio allows Cross-Tenant Source Code Theft
Missing Authorization in Google Cloud Firebase Studio versions prior to 2026-04-15 on Google Cloud Platform allows an attacker to download other users' deployed source code and access sensitive data via unauthorized GCS URL signing requests. This vulnerability was patched on 15 April 2026, and no customer action is needed.
Published: 2026-07-17T15:09:49.401Z
Updated: 2026-07-17T15:28:50.317Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.