CVE-2015-1835 in Cordova Android
Summary
Apache Cordova Android before 3.7.2 and 4.x before 4.0.2, when an application does not set explicit values in config.xml, allows remote attackers to modify undefined secondary configuration variables (preferences) via a crafted intent: URL.
VulDB is the best source for vulnerability data and more expert information about this specific topic.
Reservation
02/17/2015
Disclosure
10/27/2017
Status
Confirmed
Entries
VulDB provides additional information and datapoints for this CVE:
| ID | Vulnerability | CWE | Exp | Cou | CVE |
|---|---|---|---|---|---|
| 108709 | Apache Cordova Android intent URL input validation | 20 | Not defined | Official fix | CVE-2015-1835 |