Hacking News Critical OAuth Vulnerability in Expo Framework Allows Account Hijacking - Printable Version

+- (https://hackmyride.com/forum)
+-- Forum: Automotive Hacking (https://hackmyride.com/forum/forumdisplay.php?fid=211)
+--- Forum: News (https://hackmyride.com/forum/forumdisplay.php?fid=278)
+---- Forum: The Hacker News (https://hackmyride.com/forum/forumdisplay.php?fid=279)
+---- Thread: Hacking News Critical OAuth Vulnerability in Expo Framework Allows Account Hijacking (/showthread.php?tid=5884)



Critical OAuth Vulnerability in Expo Framework Allows Account Hijacking - The Hacker News - 05-27-2023

Critical OAuth Vulnerability in Expo Framework Allows Account Hijacking

A critical security vulnerability has been disclosed in the Open Authorization (OAuth) implementation of the application development framework Expo.io.
The shortcoming, assigned the CVE identifier CVE-2023-28131, has a severity rating of 9.6 on the CVSS scoring system. API security firm Salt Labs said the issue rendered services using the framework susceptible to credential leakage, which could

https://thehackernews.com/2023/05/critical-oauth-vulnerability-in-expo.html