Description

Apache Cordova Android before 3.5.1 allows remote attackers to change the start page via a crafted intent URL.

Remediation

References

Related Vulnerabilities

Severity

Critical

Tags

Vendor Advisory CWE-17