CVE-2017-16028CWE-330

CVE-2017-16028: vulnerability in HackerOne react-native-meteor-oauth node module

Published · Updated

Follow this CVE+ Monitor react-native-meteor-oauth node module+ Monitor randomatic

E-mail alert when it lands in KEV, gets a public PoC or its score goes up.

3Vexday Risk Score

No sign of exploitation. No public exploitation artifact known so far.

ssvc Trackepss 1.3%
react-native-meteor-oauth is a library for Oauth2 login to a Meteor server in React Native. The oauth Random Token is generated using a non-cryptographically strong RNG (Math.random()).
Affected products
HackerOne · react-native-meteor-oauth node module