CVE-2023-28131

A vulnerability in the expo.io framework allows an attacker to take over accounts and steal credentials on an application/website that configured the "Expo AuthSession Redirect Proxy" for social sign-in. This can be achieved once a victim clicks a malicious link. The link itself may be sent to the victim in various ways (including email, text message, an attacker-controlled website, etc).

• CWE-522
• CWE-522

• https://blog.expo.dev/security-advisory-for-developers-using-authsessions-useproxy-options-and-auth-expo-io-e470fe9346dfMitigation, Third Party Advisory
• https://www.darkreading.com/endpoint/oauth-flaw-in-expo-platform-affects-hundreds-of-third-party-sites-apps
• https://blog.expo.dev/security-advisory-for-developers-using-authsessions-useproxy-options-and-auth-expo-io-e470fe9346dfMitigation, Third Party Advisory
• https://www.darkreading.com/endpoint/oauth-flaw-in-expo-platform-affects-hundreds-of-third-party-sites-apps

Published

Apr 24, 2023

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2023-28126An authentication bypass vulnerability exists in Avalanche v…5.9
• CVE-2023-28127A path traversal vulnerability exists in Avalanche version 6…7.5
• CVE-2023-28128An unrestricted upload of file with dangerous type vulnerabi…7.2
• CVE-2023-28129DSM 2022.2 SU2 and all prior versions allows a local low pri…7.8
• CVE-2023-2813All of the above Aapna WordPress theme through 1.3, Anand Wo…6.1
• CVE-2023-28130Local user may lead to privilege escalation using Gaia Porta…7.2
• CVE-2023-28133Local privilege escalation in Check Point Endpoint Security …7.8
• CVE-2023-28134Local attacker can escalate privileges on affected installat…7.8
• CVE-2023-2814A vulnerability classified as problematic has been found in …6.1
• CVE-2023-28140 An Executable Hijacking condition exists in the Qualys Clou…7
• CVE-2023-28141 An NTFS Junction condition exists in the Qualys Cloud Agent…6.3
• CVE-2023-28142 A Race Condition exists in the Qualys Cloud Agent for Windo…7