Description

Apache Cordova Android before 3.5.1 allows remote attackers to change the start page via a crafted intent URL.

Remediation

References

http://cordova.apache.org/announcements/2014/08/04/android-351.html

http://www.securityfocus.com/bid/69038

Related Vulnerabilities

CVE-2018-20677 Vulnerability in maven package org.webjars.npm:bootstrap-sass

CVE-2011-2087 Vulnerability in maven package org.apache.struts:struts2-javatemplates-plugin

CVE-2020-15138 Vulnerability in npm package prismjs

CVE-2018-18282 Vulnerability in npm package next

CVE-2022-42123 Vulnerability in maven package com.liferay:com.liferay.portal.search.elasticsearch7.impl

Severity

Critical

Classification

CWE-17

Tags

Vendor Advisory