CVE-2015-5208

Description

References

• jvn.jp/en/jp/JVN41772178/index.html
• jvndb.jvn.jp/en/contents/2016/JVNDB-2016-000059.html
• packetstormsecurity.com/files/136839/Apache-Cordova-iOS-3.9.1-Arbitrary-Plugin-Execution.html
• securityfocus.com/archive/1/538210/100/0/threaded
• securityfocus.com/bid/88797
• cordova.apache.org/announcements/2016/04/27/security.html · Vendor Advisory

cordova의 다른 취약점

• CVE-2021-21315높음 7.8EXPLOITED (CISA KEV)The System Information Library for Node.JS (npm package "systeminformation") is an open source collection of functions to retrieve detailed …
• CVE-2020-11990낮음 3.3We have resolved a security issue in the camera plugin that could have affected certain Cordova (Android) applications. An attacker who coul…
• CVE-2017-3160높음 7.4After the Android platform is added to Cordova the first time, or after a project is created using the build scripts, the scripts will fetch…
• CVE-2014-0073심각 9.8The CDVInAppBrowser class in the Apache Cordova In-App-Browser standalone plugin (org.apache.cordova.inappbrowser) before 0.3.2 for iOS and …
• CVE-2014-0072높음 7.5ios/CDVFileTransfer.m in the Apache Cordova File-Transfer standalone plugin (org.apache.cordova.file-transfer) before 0.4.2 for iOS and the …