CVE-2020-7696

Katalog CVE

CVSS 5.3 · Medium EPSS 1,6%

Kerentanan Exposure of Sensitive Information to an Unauthorized Actor pada react-native-fast-image project react-native-fast-image. Skor CVSS 3.1 5.3 (Medium) menurut NVD.

Deskripsi (NVD)

This affects all versions of package react-native-fast-image. When an image with source={{uri: "...", headers: { host: "somehost.com", authorization: "..." }} is loaded, all other subsequent images will use the same headers, this can lead to signing credentials or other session tokens being leaked to other servers.

Rincian

Terbit di NVD

17 Juli 2020

Terakhir diubah

17 Juni 2026

Status NVD

Modified

CVSS 3.1

5.3 (Medium), sumber NVD
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N · uraikan di kalkulator

Jenis kelemahan (CWE)

CWE-200: Exposure of Sensitive Information to an Unauthorized Actor

EPSS (30 hari)

1,6% peluang dieksploitasi; lebih tinggi dari 74,6% CVE lain

Produk dan versi terdampak

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

• https://snyk.io/vuln/SNYK-JS-REACTNATIVEFASTIMAGE-572228 exploit · patch · advisory pihak ketiga
• https://github.com/DylanVann/react-native-fast-image/issues/690 exploit · advisory pihak ketiga
• https://github.com/DylanVann/react-native-fast-image/pull/691 exploit · issue tracking · advisory pihak ketiga