PT-2017-5772

Name of the Vulnerable Software and Affected Versions: Apache Cordova File-Transfer plugin versions prior to 0.4.2 for iOS Cordova versions 2.4.0 through 2.9.0 for iOS Description: The issue allows remote attackers to spoof SSL servers by leveraging a default value of true for the trustAllHosts...