HIGH 7.5
CVE-2014-0072
ios/CDVFileTransfer.m in the Apache Cordova File-Transfer standalone plugin (org.apache.cordova.file-transfer) before 0.4.2 for iOS and the File-Transfer plugin for iOS from Cordova 2.4.0 through 2.9.0 might allow remote attackers to spoof SSL servers by leveraging a default value of true for the trustAllHosts option.
CVSS v3 CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N
Configurations CPE vulnérables
| Vendor | Produit | Plateforme | Versions | CPE 2.3 URI |
|---|---|---|---|---|
| apache | cordova_file_transfer | iOS | ≤0.4.1 | cpe:2.3:a:apache:cordova_file_transfer:*:*:*:*:*:iphone_os:*:* |
| apache | cordova | iOS | ≥2.4.0 ≤2.9.0 | cpe:2.3:a:apache:cordova:*:*:*:*:*:iphone_os:*:* |