CVE-2014-0072

概要

参考情報

• d3adend.org/blog · Issue Tracking
• seclists.org/fulldisclosure/2014/Mar/29 · Mailing List
• securityfocus.com/archive/1/531335/100/0/threaded
• exchange.xforce.ibmcloud.com/vulnerabilities/91561 · Issue Tracking
• apache/cordova-plugin-file-transfer commit a1d6fc0 · Issue Tracking
• mail-archives.apache.org/mod_mbox/cordova-dev/201403.mbox/%3CCAK_TSXKL9JtkehHC0jEoRwdvVKXt-d5uj40EwNY-Gk3ttX=wJw%40mail.gmail.com%3E

cordova のその他の脆弱性

• CVE-2021-21315高 7.8悪用確認済み（CISA KEV）The System Information Library for Node.JS (npm package "systeminformation") is an open source collection of functions to retrieve detailed …
• CVE-2020-11990低 3.3We have resolved a security issue in the camera plugin that could have affected certain Cordova (Android) applications. An attacker who coul…
• CVE-2017-3160高 7.4After the Android platform is added to Cordova the first time, or after a project is created using the build scripts, the scripts will fetch…
• CVE-2014-0073緊急 9.8The CDVInAppBrowser class in the Apache Cordova In-App-Browser standalone plugin (org.apache.cordova.inappbrowser) before 0.3.2 for iOS and …
• CVE-2015-1835中 5.3Apache Cordova Android before 3.7.2 and 4.x before 4.0.2, when an application does not set explicit values in config.xml, allows remote atta…