Vulnerability in Adobe Phonegap

CVE-2014-1887

The DrinkedIn BarFinder application for Android, when Adobe PhoneGap 2.9.0 or earlier is used, allows remote attackers to execute arbitrary JavaScript code, and consequently obtain sensitive fine-geolocation information, by leveraging cont…

EPSS: 0.013 (68.2th percentile) — read the EPSS interpretation.

Affected products

Adobe Phonegap — versions 2.0.0, 2.1.0, 2.2.0
Drinkedin Drinkedin_barfinder
N/a — versions n/a

Weakness classification (CWE)

CWE-264

References

cve@mitre.org (Exploit, x_refsource_MISC)
cve@mitre.org (x_refsource_MISC)
cve@mitre.org (mailing-list, x_refsource_MLIST)