Read the docs

Expo

Records2All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical2CVSS 9.0–10.0
CVSS high0CVSS 7.0–8.9

Exploited now

Expo records in CISA KEV

No Expo vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
Expo 1 record MEDIUM Expo Software Development Kit 1 record MEDIUM

Records

1 record in Expo Software Development Kit · all components

TI-2023-12710 CVE-2023-28131 · GHSA-wr5g-q49g-548w

Insufficiently protected credentials in Expo.io Expo AuthSession module

Priority MEDIUM 63

A vulnerability in the expo.io framework allows an attacker to take over accounts and steal credentials on an application/website that configured the "Expo AuthSession Redirect Proxy" for social sign-in.

CVSS 3.1CRITICAL 9.6 Network No auth User interaction EPSS 0.23165 Published 2023-04-24 Fixed in 48.0.0 CWE-522
Open these records in search →