CVE-2019-0219

A website running in the InAppBrowser webview on Android could execute arbitrary JavaScript in the main application's webview using a specially crafted gap-iab: URI...

vedichoroo (1.0.0) potentially affected by CVE-2019-0219 via cordova-plugin-inappbrowser (3.0.0)

cordova-plugin-inappbrowser NPM version 3.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on cordova-plugin-inappbrowser and may be impacted: - vedichoroo 1.0.0 Source cves: CVE-2019-0219 Source advisory: OSV:GHSA-C6PW-Q7F2-97HV...

Security Bulletin: IBM MobileFirst Platform Foundation susceptible to privilege escalation on Android

Summary IBM MobileFirst Platform Foundation has addressed the following vulnerability. The affected version of the InAppBrowser plugin has been upgraded. Vulnerability Details CVEID: CVE-2019-0219 DESCRIPTION: Apache Cordova could allow a remote attacker to gain elevated privileges on the system,...