Description
Apache Cordova 3.3.0 and earlier and Adobe PhoneGap 2.9.0 and earlier do not anchor the end of domain-name regular expressions, which allows remote attackers to bypass a whitelist protection mechanism via a domain name that contains an acceptable name as an initial substring.
Affected products
Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.
n/a n/a
n/aaffected
References
- http://www.cs.utexas.edu/~shmat/shmat_ndss14nofrak.pdf ↗
- http://www.internetsociety.org/ndss2014/programme#session3 ↗
- http://seclists.org/bugtraq/2014/Jan/96 ↗
- http://labs.mwrinfosecurity.com/blog/2012/04/30/building-android-javajavascript-bridges/ ↗
- http://openwall.com/lists/oss-security/2014/02/07/9 ↗
- http://packetstormsecurity.com/files/124954/apachecordovaphonegap-bypass.txt ↗