Описание
react-native-keys 0.7.11 is vulnerable to sensitive information disclosure (remote) as encryption cipher and Base64 chunks are stored as plaintext in the compiled native binary. Attackers can extract these secrets using basic static analysis tools.
Ссылки
- ExploitMitigationThird Party Advisory
- Third Party Advisory
- ExploitMitigationThird Party Advisory
Уязвимые конфигурации
Конфигурация 1
cpe:2.3:a:numan:react-native-keys:0.7.11:*:*:*:*:*:*:*
EPSS
Процентиль: 6%
0.00024
Низкий
7.5 High
CVSS3
Дефекты
CWE-312
Связанные уязвимости
CVSS3: 7.5
github
8 месяцев назад
react-native-keys insecurely stores encryption cipher and Base64 chunks
EPSS
Процентиль: 6%
0.00024
Низкий
7.5 High
CVSS3
Дефекты
CWE-312