Edinburgh by Bus application安全绕过任意Javascript代码执行漏洞

CVE ID:CVE-2014-1886 DrinkedIn BarFinder application是一款基于安卓的应用。 当使用Adobe PhoneGap 2.9.0或之前版本时Edinburgh by Bus application存在安全漏洞，允许远程攻击者控制某些站点，来执行任意JavaScript代码，获取外部存储资源。 0 Edinburgh by Bus application for Android 目前没有详细解决方案提供：...

CVE-2014-1886

Vulnerability (CVE-2014-1886) : The Edinburgh by Bus Android app is vulnerable when using Adobe PhoneGap 2.9.0 or earlier. An attacker who can influence one of several “obscure Eastern European dating sites” can execute arbitrary JavaScript in the app and thereby access external-storage resources...