Description
Apache Cordova Android before 3.5.1 allows remote attackers to bypass the HTTP whitelist and connect to arbitrary servers by using JavaScript to open WebSocket connections through WebView.
Remediation
References
http://cordova.apache.org/announcements/2014/08/04/android-351.html
http://www.securityfocus.com/bid/69041
Related Vulnerabilities
CVE-2021-21119 Vulnerability in npm package electron
CVE-2017-5645 Vulnerability in maven package org.apache.logging.log4j:log4j
CVE-2019-0201 Vulnerability in maven package org.apache.zookeeper:zookeeper
CVE-2022-24785 Vulnerability in maven package org.fujion.webjars:moment
CVE-2019-8331 Vulnerability in maven package org.webjars.bowergithub.angular-ui:bootstrap