Vulnerability in Apache Cordova_file_transfer
CVE-2015-5204
CRLF injection vulnerability in the Apache Cordova File Transfer Plugin (cordova-plugin-file-transfer) for Android before 1.3.0 allows remote attackers to inject arbitrary headers via CRLF sequences in the filename of an uploaded file.
EPSS: 0.034 (87.6th percentile) — read the EPSS interpretation.
Affected products
- Apache Cordova_file_transfer
- N/a — versions n/a
References
- secalert@redhat.com (x_refsource_CONFIRM, Vendor Advisory)
- secalert@redhat.com (vdb-entry, x_refsource_BID)