CVE-2018-4943

ALTO 8.8CVE-2018-4943 · Published 19/05/2018 · updated 17/06/2026

En resumen

CVE-2018-4943 es una vulnerabilidad ALTO (CVSS 8.8) que afecta a push notifications (adobe).
Probabilidad de explotación en los próximos 30 días (EPSS): 6.4%, mayor que el 93.7% de las vulnerabilidades.
Aún no hay una versión corregida: sigue el aviso del fabricante en Referencias.

Package	Affected versions	Patched versions
push notifications adobe	`≤ 1.8.0`	No fix yet

Description

Adobe PhoneGap Push Plugin versions 1.8.0 and earlier have an exploitable Same-Origin Method Execution vulnerability. Successful exploitation could lead to JavaScript code execution in the context of the PhoneGap app.

References

securityfocus.com/bid/103710 · Third Party Advisory
helpx.adobe.com/security/products/phonegap/apsb18-15.html · Third Party Advisory

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free