CVE PROGRAM SOURCE RECORDUnscored

CVE-2014-3501

Apache Cordova Android before 3.5.1 allows remote attackers to bypass the HTTP whitelist and connect to arbitrary servers by using JavaScript to open WebSocket connections through

Status: Published
Published: 2014-11-15
Updated: 2024-08-06
Assigning organization: redhat

Description

Apache Cordova Android before 3.5.1 allows remote attackers to bypass the HTTP whitelist and connect to arbitrary servers by using JavaScript to open WebSocket connections through WebView.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

n/a n/a

n/aaffected

References

http://www.securityfocus.com/bid/69041 ↗
http://cordova.apache.org/announcements/2014/08/04/android-351.html ↗