Описание
CRLF injection vulnerability in the Apache Cordova File Transfer Plugin (cordova-plugin-file-transfer) for Android before 1.3.0 allows remote attackers to inject arbitrary headers via CRLF sequences in the filename of an uploaded file.
Уязвимые конфигурации
Конфигурация 1Версия до 1.2.1 (включая)
cpe:2.3:a:apache:cordova_file_transfer:*:*:*:*:*:android:*:*
EPSS
Процентиль: 80%
0.01412
Низкий
4.3 Medium
CVSS2
Дефекты
NVD-CWE-Other
Связанные уязвимости
github
больше 3 лет назад
CRLF injection vulnerability in the Apache Cordova File Transfer Plugin (cordova-plugin-file-transfer) for Android before 1.3.0 allows remote attackers to inject arbitrary headers via CRLF sequences in the filename of an uploaded file.
EPSS
Процентиль: 80%
0.01412
Низкий
4.3 Medium
CVSS2
Дефекты
NVD-CWE-Other