Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
The CDVInAppBrowser class in the Apache Cordova In-App-Browser standalone plugin (org.apache.cordova.inappbrowser) before 0.3.2 for iOS and the In-App-Browser plugin for iOS from Cordova 2.6.0 through 2.9.0 does not properly validate callback identifiers, which allows remote attackers to execute arbitrary JavaScript in the host page and consequently gain privileges via a crafted gap-iab: URI.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
Apache Cordova InAppBrowser 远程提权漏洞
Vulnerability Description
Cordova是美国阿帕奇（Apache）软件基金会的一套可使用HTML、CSS和JavaScript开发移动应用程序的平台，也是驱动PhoneGap（开发框架）的核心引擎。Cordova InAppBrowser是其中的一个支持在调用window.open时显示出一个浏览器的插件。 Apache Cordova InAppBrowser中存在远程提权漏洞。远程攻击者可利用该漏洞获取特权，执行未授权操作。以下版本受到影响：Cordova InAppBrowser iOS plugin from Cordo
CVSS Information
N/A
Vulnerability Type
N/A