CVE-2015-5208 Apache Cordova iOS before 4.0.0 allows remote attackers to execute arbitrary plugins via a link.
MediumCVSS 4.4
EPSS 4.6%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Apache Cordova iOS before 4.0.0 allows remote attackers to execute arbitrary plugins via a link.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| apache cordova | <= 3.9.1 | No fix listed |
References
- JVN#41772178 third-party-advisory
- JVNDB-2016-000059 third-party-advisory
- packetstormsecurity.com
- 20160427 CVE-2015-5208 - Arbitrary plugin execution issue in Apache Cordova iOS mailing-list
- 88797 vdb-entry
- cordova.apache.org vendor-advisory