GHSA-wr5g-q49g-548w

    Dashboard / Vulnerabilities / GHSA-wr5g-q49g-548w

    GHSA-wr5g-q49g-548w

    Published: 24 Apr 2023Last Modified: 16 Oct 2025

    Summary: Expo SDK has an OAuth vulnerability

    Details: A vulnerability in the expo.io framework allows an attacker to take over accounts and steal credentials on an application/website that configured the "Expo AuthSession Redirect Proxy" for social sign-in. This can be achieved once a victim clicks a malicious link. The link itself may be sent to the victim in various ways (including email, text message, an attacker-controlled website, etc).

    References: https://nvd.nist.gov/vuln/detail/CVE-2023-28131, https://blog.expo.dev/security-advisory-for-developers-using-authsessions-useproxy-options-and-auth-expo-io-e470fe9346df, https://github.com/expo/expo, https://www.darkreading.com/endpoint/oauth-flaw-in-expo-platform-affects-hundreds-of-third-party-sites-apps

    Affected packages

    Package

    Name: expo

    Purl: pkg:npm/expo

    Affected ranges

    Type: SEMVER

    Events:

    Introduced- 0
    Fixed -48.0.0

    Affected versions

    Common Vulnerability Scoring System

    Attack Vector
    Network
    Adjacent
    Local
    Physical
    Privileges Required
    None
    Low
    High
    User Interaction
    None
    Required
    Scope
    Unchanged
    Changed
    Confidentiality
    None
    Low
    High
    Integrity
    None
    Low
    High
    Availability
    None
    Low
    High
    GHSA-wr5g-q49g-548w | CVE-DB