CVE-2015-1835

Apache Cordova Android before 3.7.2 and 4.x before 4.0.2, when an application does not set explicit values in config.xml, allows remote attackers to modify…

published October 27, 2017

CVSS
—
EPSS
6%
Percentile
93.2
In the wild
Unconfirmed
What it is

Apache Cordova Android before 3.7.2 and 4.x before 4.0.2, when an application does not set explicit values in config.xml, allows remote attackers to modify undefined secondary configuration variables (preferences) via a crafted intent: URL.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.05911 · 93.2th percentile
Published
2017-10-27T19:00Z
EPSS history
Timeline
  • 27 OCT 19:00Z
    Apache Cordova Android before 3.7.2 and 4.x before 4.0.2, when an application does not set explicit values in config.xml, allows remote attackers to modify…
    cvelistv5