Description

CRLF injection vulnerability in the Apache Cordova File Transfer Plugin (cordova-plugin-file-transfer) for Android before 1.3.0 allows remote attackers to inject arbitrary headers via CRLF sequences in the filename of an uploaded file.

Remediation

References

http://www.securityfocus.com/bid/76832

https://cordova.apache.org/news/2015/09/21/file-transfer-release.html

Related Vulnerabilities

CVE-2021-21641 Vulnerability in maven package org.jenkins-ci.plugins:promoted-builds

CVE-2023-32314 Vulnerability in npm package vm2

CVE-2022-36902 Vulnerability in maven package com.moded.extendedchoiceparameter:dynamic_extended_choice_parameter

CVE-2020-15252 Vulnerability in maven package org.xwiki.platform:xwiki-platform-oldcore

CVE-2018-6341 Vulnerability in npm package preact-render-to-string

Severity

Critical

Tags

Vendor Advisory NVD-CWE-Other