CVE-2021-43849

cordova-plugin-fingerprint-aio is a plugin provides a single and simple interface for accessing fingerprint APIs on both Android 6+ and iOS. In versions prior to 5.0.1 The exported activity de.niklasmerz.cordova.biometric.BiometricActivity can cause the app to crash. This vulnerability occurred...

ionic-simple-lockscreen-md5 (=0.0.7), ons-mobile-login (=0.0.136) potentially affected by CVE-2021-43849 via cordova-plugin-fingerprint-aio (=1.7.0)

cordova-plugin-fingerprint-aio NPM version =1.7.0 is affected by a known vulnerability. The following packages have a transitive dependency on cordova-plugin-fingerprint-aio and may be impacted: - ionic-simple-lockscreen-md5 =0.0.7 - ons-mobile-login =0.0.136 Source cves: CVE-2021-43849 Source...

CVE-2021-43849

creationtimestamp| type| source ---|---|--- 2021-12-23 20:21:17+00:00| seen| https://t.me/cibsecurity/34575...

CVE-2021-43849

CVE-2021-43849 concerns the Cordova plugin cordova-plugin-fingerprint-aio. Reports describe that prior to version 5.0.1, the exported Android activity de.niklasmerz.cordova.biometric.BiometricActivity could crash when invoked with invalid or empty data, enabling a third party to repeatedly call t...