CVE-2019-0219

2020-01-1414:18:22

apache

www.cve.org

9.3 High

AI Score

Confidence

High

0.005 Low

EPSS

Percentile

76.5%

JSON

A website running in the InAppBrowser webview on Android could execute arbitrary JavaScript in the main application’s webview using a specially crafted gap-iab: URI.

CNA Affected

[
  {
    "product": "Cordova",
    "vendor": "Apache",
    "versions": [
      {
        "status": "affected",
        "version": "Cordova Android applications using the InAppBrowser plugin ( cordova-plugin-inappbrowser version 3.0.0 and below )"
      }
    ]
  }
]