Lucene search

CVE-2014-0073

🗓️ 30 Oct 2017 19:00:00Reported by redhatType

The CDVInAppBrowser class in the Apache Cordova In-App-Browser plugin before 0.3.2 for iOS does not validate callback identifiers, leading to remote code execution

Reporter	Title	Published	Views	Family All 6
seebug.org	Apache Cordova InAppBrowser远程权限提升漏洞	7 Mar 201400:00	–	seebug
NVD	CVE-2014-0073	30 Oct 201719:29	–	nvd
securityvulns	[CVE-2014-0072] Apache Cordova File-Transfer insecure defaults	5 May 201400:00	–	securityvulns
CVE	CVE-2014-0073	30 Oct 201719:29	–	cve
Prion	Authentication flaw	30 Oct 201719:29	–	prion
Veracode	Elevation Of Privileges	31 Oct 201705:12	–	veracode

Source	Link
d3adend	www.d3adend.org/blog/
github	www.github.com/apache/cordova-plugin-inappbrowser/commit/26702cb0720c5c394b407c23570136c53171fa55
securityfocus	www.securityfocus.com/archive/1/531334/100/0/threaded
mail-archives	www.mail-archives.apache.org/mod_mbox/cordova-dev/201403.mbox/%3CCAK_TSXLGJag5Q9ATUCbFtkWvMWX9XnC80kKp-HKi25gPcvV4gw%40mail.gmail.com%3E
exchange	www.exchange.xforce.ibmcloud.com/vulnerabilities/91560
securityfocus	www.securityfocus.com/bid/65959
seclists	www.seclists.org/fulldisclosure/2014/Mar/30

Transform Your Security Services

Elevate your offerings with Vulners' advanced Vulnerability Intelligence. Contact us for a demo and discover the difference comprehensive, actionable intelligence can make in your security strategy.

Book a live demo

30 Oct 2017 19:00Current

9.4High risk

Vulners AI Score9.4

EPSS0.01