Skip to content
Supabase Leaks, What We Found
labs.cognisys.group | blog | #cloud-security | #pentesting | #account-takeover | #ssrf | #supabase | #baas
Summary
An exposed Supabase 'anonymous' key drove full compromise in a black-box test: user enumeration, file and log leaks, SSRF via Edge Functions and account takeover, traced to default-permissive access.
- Published
- Collected