Apache Cordova In-App-Browser vulnerabilities

1 known vulnerability affecting apache/cordova_in-app-browser.

Total CVEs

1

CISA KEV

0

Public exploits

0

Exploited in wild

0

Severity breakdown

CRITICAL1

Vulnerabilities

Page 1 of 1

CVE-2014-0073CRITICALCVSS 9.8≤ 0.3.12017-10-30

CVE-2014-0073 [CRITICAL] CWE-264 CVE-2014-0073: The CDVInAppBrowser class in the Apache Cordova In-App-Browser standalone plugin (org.apache.cordova The CDVInAppBrowser class in the Apache Cordova In-App-Browser standalone plugin (org.apache.cordova.inappbrowser) before 0.3.2 for iOS and the In-App-Browser plugin for iOS from Cordova 2.6.0 through 2.9.0 does not properly validate callback identifiers, which allows remote attackers to execute arbitrary JavaScript in the host page and consequently