The vulnerability of the Cordova In-App-Browser extension for Android systems arises from the lack of protective measures for the website structure, allowing attackers to execute arbitrary JavaScript code.

The vulnerability of the Cordova In-App-Browser extension for Android relates to the lack of measures taken to protect the web page structure. Exploiting this vulnerability allows a malicious actor to execute arbitrary JavaScript code using a specially crafted URI containing the “gap-iab:“ scheme...

CVE-2019-0219

A website running in the InAppBrowser webview on Android could execute arbitrary JavaScript in the main application's webview using a specially crafted gap-iab: URI...

EUVD-2020-0969

A website running in the InAppBrowser webview on Android could execute arbitrary JavaScript in the main application's webview using a specially crafted gap-iab: URI...