Description
Directory traversal vulnerability in cordova-plugin-ionic-webview versions prior to 2.2.0 (not including 2.0.0-beta.0, 2.0.0-beta.1, 2.0.0-beta.2, and 2.1.0-0) allows remote attackers to access arbitrary files via unspecified vectors.
Remediation
References
http://jvn.jp/en/jp/JVN60497148/index.html
https://github.com/ionic-team/cordova-plugin-ionic-webview
https://jvn.jp/en/jp/JVN69812763/index.html
https://www.npmjs.com/advisories/746
Related Vulnerabilities
CVE-2020-15252 Vulnerability in maven package org.xwiki.platform:xwiki-platform-oldcore
CVE-2017-5636 Vulnerability in maven package org.apache.nifi:nifi-web-security
CVE-2017-12616 Vulnerability in maven package org.apache.tomcat:tomcat-catalina
CVE-2021-3137 Vulnerability in maven package org.xwiki.commons:xwiki-commons