CVE-2014-3501

CWE-2543 documents3 sources
Severity
4.3MEDIUM
EPSS
1.7%
top 17.98%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
1
Apache Cordova
Timeline
PublishedNov 15
Latest updateMay 17

Description

Apache Cordova Android before 3.5.1 allows remote attackers to bypass the HTTP whitelist and connect to arbitrary servers by using JavaScript to open WebSocket connections through WebView.

CVSS vector

AV:N/AC:M/C:N/I:P/A:NExploitability: 8.6 | Impact: 2.9

Affected Packages1 packages

▶NVDapache/cordova3.5.0

🔴Vulnerability Details

2
GHSA
GHSA-vp93-66cx-hjwr: Apache Cordova Android before 3↗2022-05-17
▶
CVEList
CVE-2014-3501: Apache Cordova Android before 3↗2014-11-15
▶