CVE-2020-24653

Published August 26th, 2020

View on NVD ↗

CVSS v3

9.8

CRITICAL

CVSS v2

6.8

MEDIUM

Affected

PROJECT

Description

secure-store in Expo through 2.16.1 on iOS provides the insecure kSecAttrAccessibleAlwaysThisDeviceOnly policy when WHEN_UNLOCKED_THIS_DEVICE_ONLY is used.

expo/expo

An open-source framework for making universal native apps with React. Expo runs on Android, iOS, and the web.

GitHub

50K