Description
Apache Cordova iOS before 4.0.0 allows remote attackers to execute arbitrary plugins via a link.
References
- https://cordova.apache.org/announcements/2016/04/27/security.html
- JVN#41772178 third-party-advisory
- JVNDB-2016-000059 third-party-advisory
- 88797 vdb-entry
- http://packetstormsecurity.com/files/136839/Apache-Cordova-iOS-3.9.1-Arbitrary-Plugin-Execution.html
- 20160427 CVE-2015-5208 - Arbitrary plugin execution issue in Apache Cordova iOS mailing-list