writeups.xyz / Vulnerabilities In CocoaPods Open The Door To Supply Chain Attacks Against Thousands Of iOS And MacOS Applications

Submitter : c2a

Date: 1 July 2024

Bounty : undisclosed

Vulnerabilities :

• RCE
• Account Takeover
• Supply Chain Attack
• IOS
• MacOS

Programs :

• CocoaPods

Authors :

• Reef Spektor
• Eran Vaknin

Link :
https://www.evasec.io/blog/eva-discovered-supply-chain-vulnerabities-in-cocoapods