Pax Historia: An Independent Security Assessment of Large-Scale Data Exposure and Access-Control…
Source Reddit BlueTeam
Discussion
An independent security assessment of Pax Historia revealed multiple security weaknesses, including large-scale exposure of Firestore data and issues with production API authorization. The assessment identified over 1,000,200 accessible user profile documents and verified all tested claims. The researcher contacted the company with a 10-day response window but received no official reply. Some technical details were withheld to protect users and prevent misuse.
r/Information_Security (opens in a new tab)u/OddImplement47560 points0 comments
I recently published an independent security assessment of Pax Historia, documenting multiple security weaknesses, including large-scale Firestore data exposure and production API authorization issues.
The investigation identified at least 1,000,200 accessible user profile documents and successfully verified 82 out of 82 claims.
We contacted the company and provided a 10-day response period, but have not received an official response as of publication.
Some technical details are intentionally withheld to protect users and prevent potential misuse.