CVE Daily

CVE-2014-3502

Apache Cordova Android before 3.5.1 allows remote attackers to open and send dat...

Medium CVSS 4.3

Overview

Apache Cordova Android before 3.5.1 allows remote attackers to open and send data to arbitrary applications via a URL with a crafted URI scheme for an Android intent.

CWE: CWE-200 Published: 2014-11-15T21:59:04.227
Risk analysis

This vulnerability is rated 🟡 MEDIUM.

  • CVSS: 4.3 (MEDIUM)
  • Detected tags: none (tag impact: LOW)

Recommended actions:

  • Prioritize remediation based on business criticality and exposure.
  • Limit exposure and increase monitoring until fixed.

Recommended tools

Tags