Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1359 CNY

100%
Buy Us a Coffee

CVE-2015-5207

Quick assessment

Affected
n/a n/a
Exploitation
No confirmed in-the-wild exploitation; assess based on exposure
Recommended action
Check the vendor advisory and references for a fixed version. If immediate upgrade is impossible, restrict exposure and increase monitoring.

Adobe PhoneGap是美国奥多比（Adobe）公司的一套开源的开发框架。Apache Cordova iOS是美国阿帕奇（Apache）软件基金会的一套可使用HTML、CSS和JavaScript开发基于iOS的移动应用程序的平台，也是驱动PhoneGap的核心引擎。 Apache Cordova iOS 4.0.0之前版本中存在安全漏洞。攻击者可借助特定的方法利用该漏洞绕过URL白名单保护机制，加载任意资源。

AI Predicted 5.3 Difficulty: Moderate EPSS 2.88% · P86

Possible ATT&CK Techniques 1 AI

T1071 · Application Layer Protocol
Get alerts for future matching vulnerabilities Log in to subscribe

I. Basic Information for CVE-2015-5207

Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗

Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.

Vulnerability Title
N/A
Source: CVE Program / CVE List V5
Vulnerability Description
Apache Cordova iOS before 4.0.0 might allow attackers to bypass a URL whitelist protection mechanism in an app and load arbitrary resources by leveraging unspecified methods.
Source: CVE Program / CVE List V5
CVSS Information
N/A
Source: CVE Program / CVE List V5
Vulnerability Type
N/A
Source: CVE Program / CVE List V5
Vulnerability Title
Apache Cordova iOS 安全漏洞
Source: CNNVD (China National Vulnerability Database)
Vulnerability Description
Adobe PhoneGap是美国奥多比（Adobe）公司的一套开源的开发框架。Apache Cordova iOS是美国阿帕奇（Apache）软件基金会的一套可使用HTML、CSS和JavaScript开发基于iOS的移动应用程序的平台，也是驱动PhoneGap的核心引擎。 Apache Cordova iOS 4.0.0之前版本中存在安全漏洞。攻击者可借助特定的方法利用该漏洞绕过URL白名单保护机制，加载任意资源。
Source: CNNVD (China National Vulnerability Database)
CVSS Information
N/A
Source: CNNVD (China National Vulnerability Database)
Vulnerability Type
N/A
Source: CNNVD (China National Vulnerability Database)

Affected Products

Vendor Product Affected Versions CPE Subscribe
- n/a n/a -

II. Public POCs for CVE-2015-5207

# POC Description Source Link Shenlong Link
AI-Generated POC Premium

No public POC found.

Login to generate AI POC

III. Intelligence Information for CVE-2015-5207

请登录查看更多情报信息。

Vendor Advisories for CVE-2015-5207 (3)

Exploits & Public PoCs for CVE-2015-5207 (1)

Other References for CVE-2015-5207 (2)

Same Patch Batch · n/a · 2016-05-09 · 41 CVEs total

CVE-2016-2458 Android AOSP Mail 信息泄露漏洞
CVE-2016-2448 Android Mediaserver 提权漏洞
CVE-2016-2449 Android Mediaserver 提权漏洞
CVE-2016-2450 Android Mediaserver 提权漏洞
CVE-2016-2451 Android Mediaserver 提权漏洞
CVE-2016-2452 Android Mediaserver 提权漏洞
CVE-2016-2453 Android MediaTek Wi-Fi Driver 权限许可和访问控制漏洞
CVE-2016-2454 Android Qualcomm Hardware Codec 输入验证漏洞
CVE-2016-2456 Android MediaTek Wi-Fi Driver 权限许可和访问控制漏洞
CVE-2016-2457 Android Wi-Fi 提权漏洞
CVE-2016-2446 Android NVIDIA Video Driver 权限许可和访问控制漏洞
CVE-2016-2459 Android Mediaserver 信息泄露漏洞
CVE-2016-2460 Android Mediaserver 信息泄露漏洞
CVE-2016-2461 Android Conscrypt 提权漏洞
CVE-2016-2462 Android Conscrypt 提权漏洞
CVE-2016-4476 wpa_supplicant和hostapd 拒绝服务漏洞
CVE-2016-4477 wpa_supplicant 安全漏洞
CVE-2015-5208 Apache Cordova iOS 安全漏洞
CVE-2016-3105 Mercurial convert扩展任意代码执行漏洞
CVE-2016-4350 SolarWinds Storage Resource Monitor Profiler SQL注入漏洞

Showing top 20 of 41 CVEs. View all on vendor page → →

IV. Related Vulnerabilities

Same product: n/a
Same vendor: n/a

V. Comments for CVE-2015-5207

No comments yet

Leave a comment