Vulnerability in Adobe Phonegap

CVE-2014-1886

The Edinburgh by Bus application for Android, when Adobe PhoneGap 2.9.0 or earlier is used, allows remote attackers to execute arbitrary JavaScript code, and consequently access external-storage resources, by leveraging control over one of…

EPSS: 0.015 (71.0th percentile) — read the EPSS interpretation.

Affected products

Adobe Phonegap — versions 2.0.0, 2.1.0, 2.2.0
Edinburghtour Edinburgh_by_bus
N/a — versions n/a

Weakness classification (CWE)

CWE-264

References

cve@mitre.org (Exploit, x_refsource_MISC)
cve@mitre.org (x_refsource_MISC)
cve@mitre.org (mailing-list, x_refsource_MLIST)