Man-in-the-Middle (MitM)

cordova-plugin-file-transfer is susceptible to man-in-the-middle MitM attacks. The attacks are possible because the X509TrustManager fails to validate SSL certificates in the checkServerTrusted method, allowing any SSL certificate to connect to the server over SSL/TLS...

CVE-2015-5204

CRLF injection vulnerability in the Apache Cordova File Transfer Plugin cordova-plugin-file-transfer for Android before 1.3.0 allows remote attackers to inject arbitrary headers via CRLF sequences in the filename of an uploaded file...

PT-2015-6801

Name of the Vulnerable Software and Affected Versions cordova-plugin-file-transfer version 1.3.0 and earlier Description The issue concerns a CRLF injection vulnerability. This vulnerability allows remote attackers to inject arbitrary headers via CRLF sequences in the filename of an uploaded file...

CVE-2015-5204: Undefined Security Weakness

CRLF injection vulnerability in the Apache Cordova File Transfer Plugin cordova-plugin-file-transfer for Android before 1.3.0 allows remote attackers to inject arbitrary headers via CRLF sequences in the filename of an uploaded file...