CVE-2019-0219

🗓️ 14 Jan 2020 14:18:22Reported by apacheType

cve🔗 web.nvd.nist.gov📰️ 2 Media mentions👁 99 Views

A website in InAppBrowser webview on Android can execute arbitrary JavaScript in the main app's webview

Reporter	Title	Published	Views	Family All 17
IBM Security Bulletins	Security Bulletin: IBM MobileFirst Platform Foundation susceptible to privilege escalation on Android	2 Mar 202016:44	–	ibm
CNVD	Apache Cordova Cross-Site Scripting Vulnerability	22 Apr 202200:00	–	cnvd
Cvelist	CVE-2019-0219	14 Jan 202014:18	–	cvelist
EUVD	EUVD-2020-0969	14 Jan 202014:18	–	euvd
Github Security Blog	Privilege Escalation in cordova-plugin-inappbrowser	4 Sep 202017:57	–	github
NCSC	Vulnerabilities fixed in Oracle Supply Chain products	20 Jul 202200:00	–	ncsc
Node.js	Privilege Escalation	30 Jan 202020:43	–	nodejs
NVD	CVE-2019-0219	14 Jan 202015:15	–	nvd
Oracle	Oracle Critical Patch Update Advisory - April 2021	20 Apr 202100:00	–	oracle
Oracle	Oracle Critical Patch Update Advisory - July 2021	20 Jul 202100:00	–	oracle

NVD

Vulners

Node

apache cordova_inappbrowserRange≤3.0.0android

Node

oracle instantis_enterprisetrackMatch17.1

oracle instantis_enterprisetrackMatch17.2

oracle instantis_enterprisetrackMatch17.3

oracle retail_xstore_point_of_serviceMatch16.0.6

oracle retail_xstore_point_of_serviceMatch17.0.4

oracle retail_xstore_point_of_serviceMatch18.0.3

oracle retail_xstore_point_of_serviceMatch19.0.2

[
  {
    "product": "Cordova",
    "vendor": "Apache",
    "versions": [
      {
        "status": "affected",
        "version": "Cordova Android applications using the InAppBrowser plugin ( cordova-plugin-inappbrowser version 3.0.0 and below )"
      }
    ]
  }
]

Source	Link
oracle	www.oracle.com//security-alerts/cpujul2021.html
openwall	www.openwall.com/lists/oss-security/2019/11/28/1
oracle	www.oracle.com/security-alerts/cpuApr2021.html
lists	www.lists.apache.org/thread.html/197482d5ab80c0bff4a5ec16e1b0466df38389d9a4b5331d777f14fc%40%3Cdev.cordova.apache.org%3E
lists	www.lists.apache.org/thread/4vtg0trdrh5203dktt4f3vkd5z2d5ndj
oracle	www.oracle.com/security-alerts/cpujul2022.html

21 Nov 2024 04:16Current

9.1High risk

Vulners AI Score9.1

CVSS 27.5

CVSS 3.19.8

EPSS0.08908