With the recent #Tea app breach, one of them was an unsecured Firebase bucket where photos where stored for verificationSo bascially everyone could read/write to the bucket aka download the imagesAlso, the EXIF data was still included on these photos to make it even worse~13 000 images till 2024The second bug gave users access tp an API key that could request any data from the databaseIt's bad