| Package | Affected versions | Patched versions |
|---|---|---|
| cordova | ≤ 3.6.4 |
Apache Cordova-Android before 4.1.0, when an application relies on a remote server, improperly implements a JavaScript whitelist protection mechanism, which allows attackers to bypass intended access restrictions via a crafted URI.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free