Lucene search
Veracode Vulnerability DatabaseVERACODE:5350HistoryOct 31, 2017 - 5:24 a.m.
Insecure Defaults
2017-10-3105:24:18
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
4
0.002 Low
EPSS
Percentile
60.5%
cordova-plugin-file-transfer has insecure default. The default value for trustAllHosts is true for iOS applications. By using this flaw, attackers can easily spoof SSL servers and have them be trusted by the application.
| CPE | Name | Operator | Version |
|---|---|---|---|
| cordova-plugin-file-transfer | le | 0.4.1 |
Related
cve
cve
CVE-2014-0072
2017-10-30 19:29:00
seebug
seebug
Apache Cordova文件传输不安全默认值漏洞
2014-03-07 00:00:00
securityvulns
securityvulns
[CVE-2014-0072] Apache Cordova File-Transfer insecure defaults
2014-05-05 00:00:00
nvd
nvd
CVE-2014-0072
2017-10-30 19:29:00
prion
prion
Code injection
2017-10-30 19:29:00
cvelist
cvelist
CVE-2014-0072
2017-10-30 19:00:00