CVE-2015-5208

CWE-20 — Improper Input Validation3 documents3 sources
Severity
4.4MEDIUM
EPSS
1.8%
top 17.23%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
1
Apache Cordova
Timeline
PublishedMay 9
Latest updateMay 14

Description

Apache Cordova iOS before 4.0.0 allows remote attackers to execute arbitrary plugins via a link.

CVSS vector

CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:NExploitability: 1.8 | Impact: 2.5

Affected Packages1 packages

▶NVDapache/cordova3.9.1

🔴Vulnerability Details

2
GHSA
GHSA-8gpj-ff3f-jff9: Apache Cordova iOS before 4↗2022-05-14
▶
CVEList
CVE-2015-5208: Apache Cordova iOS before 4↗2016-05-09
▶
CVE-2015-5208 (MEDIUM CVSS 4.4) | Apache Cordova iOS before 4.0.0 all | cvebase.io