CVE-2014-0073

概要

参考情報

• d3adend.org/blog · Issue Tracking
• seclists.org/fulldisclosure/2014/Mar/30 · Mailing List
• securityfocus.com/archive/1/531334/100/0/threaded
• securityfocus.com/bid/65959 · Third Party Advisory
• exchange.xforce.ibmcloud.com/vulnerabilities/91560 · Issue Tracking
• apache/cordova-plugin-inappbrowser commit 26702cb · Issue Tracking
• mail-archives.apache.org/mod_mbox/cordova-dev/201403.mbox/%3CCAK_TSXLGJag5Q9ATUCbFtkWvMWX9XnC80kKp-HKi25gPcvV4gw%40mail.gmail.com%3E

cordova のその他の脆弱性

• CVE-2021-21315高 7.8悪用確認済み（CISA KEV）The System Information Library for Node.JS (npm package "systeminformation") is an open source collection of functions to retrieve detailed …
• CVE-2020-11990低 3.3We have resolved a security issue in the camera plugin that could have affected certain Cordova (Android) applications. An attacker who coul…
• CVE-2017-3160高 7.4After the Android platform is added to Cordova the first time, or after a project is created using the build scripts, the scripts will fetch…
• CVE-2014-0072高 7.5ios/CDVFileTransfer.m in the Apache Cordova File-Transfer standalone plugin (org.apache.cordova.file-transfer) before 0.4.2 for iOS and the …
• CVE-2015-1835中 5.3Apache Cordova Android before 3.7.2 and 4.x before 4.0.2, when an application does not set explicit values in config.xml, allows remote atta…