7.2 High
AI Score
Confidence
Low
0.003 Low
EPSS
Percentile
71.4%
CRLF injection vulnerability in the Apache Cordova File Transfer Plugin (cordova-plugin-file-transfer) for Android before 1.3.0 allows remote attackers to inject arbitrary headers via CRLF sequences in the filename of an uploaded file.