Описание
Path Traversal in cordova-plugin-ionic-webview
Versions of cordova-plugin-ionic-webview prior to 2.2.0 are vulnerable to Path Traversal, allowing attackers access to OS local files that should be inaccessible by third-party applications. The package launches a webserver listening on http://localhost:8080 without restricting access of the app itself, thus escaping the iOS application sandbox and accessing local files.
Recommendation
Upgrade to version 2.2.0
Пакеты
cordova-plugin-ionic-webview
< 2.2.0
2.2.0
Связанные уязвимости
Directory traversal vulnerability in cordova-plugin-ionic-webview versions prior to 2.2.0 (not including 2.0.0-beta.0, 2.0.0-beta.1, 2.0.0-beta.2, and 2.1.0-0) allows remote attackers to access arbitrary files via unspecified vectors.
Уязвимость плагина cordova-plugin-ionic-webview, связанная с недостатками ограничения имени пути к каталогу, позволяющая нарушителю получить доступ к произвольным файлам