CVE-2023-28131

creationtimestamp| type| source ---|---|--- 2023-05-27 12:04:21+00:00| seen| https://t.me/KomunitiSiber/270 2023-05-27 12:36:19+00:00| seen| Telegram/4JcQAuBxmm8dw44PHvyl2tx5RMR2k6iaSB2MvR2ejzDQ 2023-05-27 12:37:01+00:00| seen| https://t.me/CyberSecurityTechnologies/8371 2023-06-26 02:49:49+00:00...

4help-shared (>=1.0.8, <=1.0.15), @akalli/components (>=0.0.1, <=0.2.3) +245 more potentially affected by CVE-2023-28131 via expo (>=45.0.0, <=47.0.14)

expo NPM version =45.0.0, =1.0.8, =0.0.1, =0.0.1, =0.0.3, =2.5.0, =0.0.0, =1.2.0, =1.0.0, =1.0.0, =0.1.0, =1.0.0, =1.0.0, =1.0.7 and more Source cves: CVE-2023-28131 Source advisory: SNYK:JS-EXPO-13559201...

CVE-2023-28131

A vulnerability in the expo.io framework allows an attacker to take over accounts and steal credentials on an application/website that configured the "Expo AuthSession Redirect Proxy" for social sign-in. This can be achieved once a victim clicks a malicious link. The link itself may be sent to th...

CVE-2023-28131

Summary of CVE-2023-28131 (expo.io / Expo SDK) The vulnerability affects the Expo framework, specifically the OAuth/AuthSession Redirect Proxy used for social sign-in. The root issue involves insufficient protection of callback/redirect handling via auth.expo.io, enabling an attacker to cause a v...