Skip to content
CVE PROGRAM SOURCE RECORD5.3 Medium

CVE-2020-7696

Information Exposure

Description

This affects all versions of package react-native-fast-image. When an image with source={{uri: "...", headers: { host: "somehost.com", authorization: "..." }} is loaded, all other subsequent images will use the same headers, this can lead to signing credentials or other session tokens being leaked to other servers.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

n/a react-native-fast-image

  • 0 to < unspecifiedaffected

References