Cordova File Transfer vulnerabilities | LiveThreat CVE Feed

Product

Cordova File Transfer

by Apache · last CVE Oct 30, 2017

CVEs

On KEV

7.5

Max CVSS

New 30D

Severity mix

Critical 0High 1Medium 0Low 0

Severity

Exploitation

Watch

Add Cordova File Transfer to your stack to get only the CVEs that touch what you run.

CVE	CVSS	EPSS	Published	Summary · affected versions
CVE-2014-0072	7.5	8%	Oct 30	ios/CDVFileTransfer.m in the Apache Cordova File-Transfer standalone plugin (org.apache.cordova.file-transfer) before 0.4.2 for iOS and the File-Transfer plugin for iOS from… Affected: through 0.4.1
CVE-2015-5204	–	3%	Dec 17	CRLF injection vulnerability in the Apache Cordova File Transfer Plugin (cordova-plugin-file-transfer) for Android before 1.3.0 allows remote attackers to inject arbitrary headers… Affected: through 1.2.1