Vulnerability in Adobe Phonegap

CVE-2014-1885

The ForzeArmate application for Android, when Adobe PhoneGap 2.9.0 or earlier is used, allows remote attackers to execute arbitrary JavaScript code, and consequently obtain write access to external-storage resources, by leveraging control…

EPSS: 0.016 (72.6th percentile) — read the EPSS interpretation.

Affected products

Adobe Phonegap — versions 2.0.0, 2.1.0, 2.2.0
Hsgroup Forzearmate
N/a — versions n/a

Weakness classification (CWE)

CWE-264

References

cve@mitre.org (x_refsource_MISC)
cve@mitre.org (x_refsource_MISC)
cve@mitre.org (mailing-list, x_refsource_MLIST)