Vulnerability in Adobe Phonegap
CVE-2014-1886
The Edinburgh by Bus application for Android, when Adobe PhoneGap 2.9.0 or earlier is used, allows remote attackers to execute arbitrary JavaScript code, and consequently access external-storage resources, by leveraging control over one of a number of "obscure Eastern European dating sites."
EPSS: 0.015 (72.1th percentile) — read the EPSS interpretation.
Affected products
- Adobe Phonegap — versions 2.0.0, 2.1.0, 2.2.0
- Edinburghtour Edinburgh_by_bus
- N/a — versions n/a
Weakness classification (CWE)
References
- cve@mitre.org (Exploit, x_refsource_MISC)
- cve@mitre.org (x_refsource_MISC)
- cve@mitre.org (mailing-list, x_refsource_MLIST)