Cordova File Transfer

2 CVEs product

Monthly

Sort: Newest CVSS Score EPSS Score Oldest

CVE-2014-0072 HIGH PATCH This Week

ios/CDVFileTransfer.m in the Apache Cordova File-Transfer standalone plugin (org.apache.cordova.file-transfer) before 0.4.2 for iOS and the File-Transfer plugin for iOS from Cordova 2.4.0 through. Rated high severity (CVSS 7.5), this vulnerability is remotely exploitable, no authentication required, low attack complexity.

Apple Apache Information Disclosure Cordova File Transfer Cordova

NVD GitHub

CVSS 3.0

7.5

EPSS

1.5%

CVE-2015-5204 MEDIUM This Month

CRLF injection vulnerability in the Apache Cordova File Transfer Plugin (cordova-plugin-file-transfer) for Android before 1.3.0 allows remote attackers to inject arbitrary headers via CRLF sequences. Rated medium severity (CVSS 4.3), this vulnerability is remotely exploitable. No vendor patch available.

Google Code Injection Apache Cordova File Transfer

NVD

CVSS 2.0

4.3

EPSS

1.0%

CVE-2014-0072

EPSS 1% CVSS 7.5

HIGH PATCH This Week

Apple Apache Information Disclosure +2

NVD GitHub

CVE-2015-5204

EPSS 1% CVSS 4.3

MEDIUM This Month

Google Code Injection Apache +1

NVD