Cordova Plugin Advanced Http
Monthly
cordova-plugin-advanced-http 1.5.0 through 3.3.1 on native iOS and Android can leak cookies to a third-party host when a request to an origin with stored cookies is redirected and the plugin's native HTTP stack follows the redirect. The JavaScript layer builds Cookie headers from the plugin cookie jar and passes them as ordinary request headers, so an open or attacker-influenced redirect can forward them across origins; the upstream fix tests also show Authorization and Proxy-Authorization being dropped on cross-origin hops. No public exploit identified at time of analysis; unauthenticated attackers need the app to hold cookies for the original origin and to follow a redirect to an attacker-influenced host.
cordova-plugin-advanced-http 1.5.0 through 3.3.1 on native iOS and Android can leak cookies to a third-party host when a request to an origin with stored cookies is redirected and the plugin's native HTTP stack follows the redirect. The JavaScript layer builds Cookie headers from the plugin cookie jar and passes them as ordinary request headers, so an open or attacker-influenced redirect can forward them across origins; the upstream fix tests also show Authorization and Proxy-Authorization being dropped on cross-origin hops. No public exploit identified at time of analysis; unauthenticated attackers need the app to hold cookies for the original origin and to follow a redirect to an attacker-influenced host.