CVE-2017-16028

CVE-2017-16028 describes a weakness in the react-native-meteor-oauth library, where the OAuth random token generation relies on a cryptographically weak random number generator (Math.random()). This vulnerability affects the randomatic_project randomatic product. Rated as MEDIUM severity with a CVSS score of 5.3, it presents a network-based attack vector with low complexity, potentially leading to a loss of confidentiality. There is no evidence of active exploitation, publicly available exploit code, or significant community discussion surrounding this CVE.