Apache Cordova vulnerabilities

• apache software foundation cordova plugin inappbrowser, apache cordova inappbrowser +1 more Cordova Plugin InAppBrowser: iOS: Arbitrary Cordova callback IDs can be dispatched without validation from InAppBrowser WebViews CVE-2026-47430 Fix available 9.5 CriticalJune 8, 2026
• npm package system information library for node.js, sebhildebrandt systeminformation, apache cordova +2 more Command Injection Vulnerability CVE-2021-21315 In KEVPublic exploitFix available EPSS 90.7% 7.1 HighFebruary 16, 2021
• apache cordova We have resolved a security issue in the camera plugin that could have affected certain Cordova ... CVE-2020-11990 Public exploit 3.3 LowDecember 1, 2020
• apache cordova, cordova inappbrowser, oracle instantis enterprisetrack +1 more +3 more Privilege Escalation in cordova-plugin-inappbrowser CVE-2019-0219 Fix available 9.8 CriticalJanuary 14, 2020
• apache cordova, apache software foundation cordova android +1 more After the Android platform is added to Cordova the first time, or after a project is created... CVE-2017-3160 7.4 HighFebruary 1, 2018
• apache cordova, cordova in-app-browser +1 more The CDVInAppBrowser class in the Apache Cordova In-App-Browser standalone plugin (org.apache... CVE-2014-0073 9.8 CriticalOctober 30, 2017
• apache cordova, cordova file transfer +1 more ios/CDVFileTransfer.m in the Apache Cordova File-Transfer standalone plugin (org.apache.cordova... CVE-2014-0072 7.5 HighOctober 30, 2017
• apache cordova Apache Cordova Android before 3.7.2 and 4.x before 4.0.2, when an application does not set... CVE-2015-1835 5.3 MediumOctober 27, 2017
• apache cordova, apache software foundation cordova android +1 more Information Exposure in cordova-android CVE-2016-6799 Fix available 7.5 HighMay 9, 2017
• apache cordova Apache Cordova iOS before 4.0.0 allows remote attackers to execute arbitrary plugins via a link. CVE-2015-5208 4.4 MediumMay 9, 2016
• apache cordova Apache Cordova iOS before 4.0.0 might allow attackers to bypass a URL whitelist protection... CVE-2015-5207 5.3 MediumMay 9, 2016
• apache cordova file transfer CRLF injection vulnerability in the Apache Cordova File Transfer Plugin (cordova-plugin-file... CVE-2015-5204 4.3 MediumDecember 17, 2015
• apache cordova Apache Cordova-Android before 3.7.0 improperly generates random values for BridgeSecret data,... CVE-2015-8320 5.0 MediumNovember 23, 2015
• apache cordova Apache Cordova-Android before 4.1.0, when an application relies on a remote server, improperly... CVE-2015-5256 4.3 MediumNovember 23, 2015
• apache cordova Apache Cordova Android before 3.5.1 allows remote attackers to open and send data to arbitrary... CVE-2014-3502 4.3 MediumNovember 15, 2014
• apache cordova Apache Cordova Android before 3.5.1 allows remote attackers to bypass the HTTP whitelist and... CVE-2014-3501 4.3 MediumNovember 15, 2014
• apache cordova Apache Cordova Android before 3.5.1 allows remote attackers to change the start page via a... CVE-2014-3500 6.4 MediumNovember 15, 2014
• adobe phonegap, apache cordova +1 more Apache Cordova 3.3.0 and earlier and Adobe PhoneGap 2.9.0 and earlier on Windows Phone 7 and 8 do... CVE-2014-1884 7.5 HighMarch 3, 2014
• adobe phonegap, apache cordova +1 more Apache Cordova 3.3.0 and earlier and Adobe PhoneGap 2.9.0 and earlier allow remote attackers to... CVE-2014-1882 EPSS 11.9% 7.5 HighMarch 3, 2014
• adobe phonegap, apache cordova +1 more Apache Cordova 3.3.0 and earlier and Adobe PhoneGap 2.9.0 and earlier allow remote attackers to... CVE-2014-1881 EPSS 11.4% 7.5 HighMarch 3, 2014
• adobe phonegap, apache cordova +1 more Apache Cordova 3.3.0 and earlier and Adobe PhoneGap 2.9.0 and earlier do not anchor the end of... CVE-2012-6637 7.5 HighMarch 3, 2014