Check catalog
158 checks. Every one explained.
Each check has a permanent ID, the attack it models, why it matters and how to fix it.
18 checks
- ERT-BAAS-001Supabase table readable by anonymous usersPassiveCritical
- ERT-BAAS-002Supabase table writable by anonymous usersWriteCritical
- ERT-BAAS-003Supabase INSERT allowed for anonymous usersWriteHigh
- ERT-BAAS-004Supabase DELETE allowed for anonymous usersBackend configCritical
- ERT-BAAS-005Cross-user data access through SupabaseAuthenticatedCritical
- ERT-BAAS-006RLS disabled or permissive policiesBackend configCritical
- ERT-BAAS-007SECURITY DEFINER functions callable via RPCBackend configHigh
- ERT-BAAS-008Supabase Storage bucket public or listablePassiveHigh
- ERT-BAAS-009Supabase Auth email confirmation disabledBackend configHigh
- ERT-BAAS-010Open signup on an invite-only appPassiveMedium
- ERT-BAAS-011Supabase Security Advisor findingsBackend configMedium
- ERT-BAAS-012PostgREST schema exposed to anonymous usersPassiveLow
- ERT-BAAS-013Firestore collection readable without authPassiveCritical
- ERT-BAAS-014Firebase Realtime Database readablePassiveCritical
- ERT-BAAS-015Firebase Storage listablePassiveHigh
- ERT-BAAS-016Firebase data writable without authWriteCritical
- ERT-BAAS-017Firebase rules allow all or expired test modeCodeCritical
- ERT-BAAS-018Other BaaS public collectionsPassiveHigh
