Cordova File Transfer

2 CVEs product

Monthly

Sort: Newest CVSS Score EPSS Score Oldest

CVE-2014-0072 Oct 30, 19:29 HIGH PATCH This Week

ios/CDVFileTransfer.m in the Apache Cordova File-Transfer standalone plugin (org.apache.cordova.file-transfer) before 0.4.2 for iOS and the File-Transfer plugin for iOS from Cordova 2.4.0 through. Rated high severity (CVSS 7.5), this vulnerability is remotely exploitable, no authentication required, low attack complexity.

Apache Information Disclosure Apple Cordova Cordova File Transfer

NVD GitHub

CVSS 3.0

7.5

EPSS

1.5%

CVE-2015-5204 Dec 17, 19:59 MEDIUM This Month

CRLF injection vulnerability in the Apache Cordova File Transfer Plugin (cordova-plugin-file-transfer) for Android before 1.3.0 allows remote attackers to inject arbitrary headers via CRLF sequences. Rated medium severity (CVSS 4.3), this vulnerability is remotely exploitable. No vendor patch available.

Apache Google Code Injection Cordova File Transfer

NVD

CVSS 2.0

4.3

EPSS

1.0%

CVE-2014-0072

EPSS 1% CVSS 7.5

HIGH PATCH This Week

Apache Information Disclosure Apple +2

NVD GitHub

CVE-2015-5204

EPSS 1% CVSS 4.3

MEDIUM This Month

Apache Google Code Injection +1

NVD