Description
Directory traversal vulnerability in cordova-plugin-ionic-webview versions prior to 2.2.0 (not including 2.0.0-beta.0, 2.0.0-beta.1, 2.0.0-beta.2, and 2.1.0-0) allows remote attackers to access arbitrary files via unspecified vectors.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| npm | cordova-plugin-ionic-webview | versions prior to 2.2.0 (not including 2.0.0-beta.0, 2.0.0-beta.1, 2.0.0-beta.2, and 2.1.0-0) | — |
Affected packages
| Ecosystem | Package | Affected | Fixed | Record |
|---|---|---|---|---|
| npm | cordova-plugin-ionic-webview | < 2.2.0 | 2.2.0 | GHSA-xwjh-cp99-cj8q |
Advisories 1
- ICSA-22-025-01 GE Gas Power ToolBoxST CISA ICS & IT advisories · Jan 25, 2022
References
- JVN#69812763 third-party-advisory
- https://github.com/ionic-team/cordova-plugin-ionic-webview
- https://www.npmjs.com/advisories/746
- JVN#60497148 third-party-advisory