tl;dv Firestore Database Vulnerability Exposes 181,874 Meetings

The meetings collection in tl;dv’s Firestore database lacks tenant isolation, allowing any authenticated user to access all meeting records across the platform. These records include the creator’s email, conference ID (for joinable Google Meet or Teams rooms), provider details, recording status, and timestamps. A query revealed 181,874 meeting records linked to 84,312 unique users across 35,003 email domains.