CVE-2015-5204

2015-12-17T14:59:01
ID CVE-2015-5204
Type cve
Reporter NVD
Modified 2015-12-18T13:04:49

Description

CRLF injection vulnerability in the Apache Cordova File Transfer Plugin (cordova-plugin-file-transfer) for Android before 1.3.0 allows remote attackers to inject arbitrary headers via CRLF sequences in the filename of an uploaded file.