Aller au contenu
5.3 Moyenne

CVE-2020-7696 This affects all versions of package react-native-fast-image

Description

This affects all versions of package react-native-fast-image. When an image with source={{uri: "...", headers: { host: "somehost.com", authorization: "..." }} is loaded, all other subsequent images will use the same headers, this can lead to signing credentials or other session tokens being leaked to other servers.

Produits et versions touchés

Produit Versions touchées Corrigé en
react-native-fast-image Versions non publiées
Suivre cette CVE