CO
Product
Cordova
On CISA KEVExploited in the wild
18
CVEs
1
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 1High 4Medium 3Low 1
Watch
Add Cordova to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2021-21315 In wildKEV | 7.8 | Feb 16 | Command Injection Vulnerability Affected: 10.0.0 |
| CVE-2014-0072 | 7.5 | Oct 30 | ios/CDVFileTransfer.m in the Apache Cordova File-Transfer standalone plugin (org.apache.cordova.file-transfer) before 0.4.2 for iOS and the File-Transfer plugin for iOS from… Affected: 2.4.0 through 2.9.0 |
| CVE-2016-6799 | 7.5 | May 9 | Product: Apache Cordova Android 5.2.2 and earlier Affected: through 5.2.2 |
| CVE-2017-3160 | 7.4 | Feb 1 | After the Android platform is added to Cordova the first time, or after a project is created using the build scripts, the scripts will fetch Gradle on the first build Affected: before 6.1.2 |
Showing 4