Description

Apache Cordova Android before 3.5.1 allows remote attackers to change the start page via a crafted intent URL.

Remediation

References

http://cordova.apache.org/announcements/2014/08/04/android-351.html

http://www.securityfocus.com/bid/69038

Related Vulnerabilities

CVE-2018-8009 Vulnerability in maven package org.apache.hadoop:hadoop-common

CVE-2019-16555 Vulnerability in maven package com.sonyericsson.jenkins.plugins.bfa:build-failure-analyzer

CVE-2013-4590 Vulnerability in maven package org.apache.tomcat:catalina

CVE-2020-2092 Vulnerability in maven package org.jenkins-ci.plugins:robot

CVE-2021-37580 Vulnerability in maven package org.apache.shenyu:shenyu-admin

Severity

Critical

Classification

CWE-17

Tags

Vendor Advisory