| Package | Affected versions | Patched versions |
|---|---|---|
| cordova file transfer | ≤ 1.2.1 |
CRLF injection vulnerability in the Apache Cordova File Transfer Plugin (cordova-plugin-file-transfer) for Android before 1.3.0 allows remote attackers to inject arbitrary headers via CRLF sequences in the filename of an uploaded file.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free