| Package | Affected versions | Patched versions |
|---|---|---|
| ionic web view | = 2.0.0≥ 2.0.1, < 2.2.0≤ 1.2.1 | 2.2.0 |
| cordova-plugin-ionic-webview | < 2.2.0 | 2.2.0 |
Versions of cordova-plugin-ionic-webview prior to 2.2.0 are vulnerable to Path Traversal, allowing attackers access to OS local files that should be inaccessible by third-party applications. The package launches a webserver listening on http://localhost:8080 without restricting access of the app itself, thus escaping the iOS application sandbox and accessing local files.
Upgrade to version 2.2.0
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free