Apache Cordova Android before 3.5.1 allows remote attackers to change the start page via a crafted intent URL.

Published Nov 15, 2014 · Updated Aug 6, 2024 · Assigned by redhat