CVE-2017-16028CWE-330

react-native-meteor-oauth is a library for Oauth2 login to a Meteor server in React Native

published June 4, 2018

CVSS
—
EPSS
1%
Percentile
70.8
In the wild
Unconfirmed
What it is

react-native-meteor-oauth is a library for Oauth2 login to a Meteor server in React Native. The oauth Random Token is generated using a non-cryptographically strong RNG (Math.random()).

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01329 · 70.8th percentile
Weakness
CWE-330 · Use of Insufficiently Random Values
Published
2018-06-04T19:00Z
EPSS history
Timeline
  • 04 JUN 19:00Z
    react-native-meteor-oauth is a library for Oauth2 login to a Meteor server in React Native
    cvelistv5