CVE-2020-7696 — Information Exposure
This affects all versions of package react-native-fast-image. When an image with source={{uri: "...", headers: { host: "somehost.com", authorization: "..." }} is loaded, all oth…
Published: 2020-07-17 · CVSS: 5.3 · CVSS 3.1
This affects all versions of package react-native-fast-image. When an image with source={{uri: "...", headers: { host: "somehost.com", authorization: "..." }} is loaded, all other subsequent images will use the same headers, this can lead to signing credentials or other session tokens being leaked to other servers.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7