Description
Apache Cordova iOS before 4.0.0 might allow attackers to bypass a URL whitelist protection mechanism in an app and load arbitrary resources by leveraging unspecified methods.
References
- http://packetstormsecurity.com/files/136840/Apache-Cordova-iOS-3.9.1-Access-Bypass.html
- https://cordova.apache.org/announcements/2016/04/27/security.html
- JVNDB-2016-000058 third-party-advisory
- 20160427 CVE-2015-5207 - Bypass of Access Restrictions in Apache Cordova iOS mailing-list
- 88764 vdb-entry
- JVN#35341085 third-party-advisory