CVE-2015-5204 | BDVDB-2026-73396 Detail

Description#

CRLF injection vulnerability in the Apache Cordova File Transfer Plugin (cordova-plugin-file-transfer) for Android before 1.3.0 allows remote attackers to inject arbitrary headers via CRLF sequences in the filename of an uploaded file.

Impact#

No impact statement in the source data.

Weaknesses#

No weakness recorded in the source data.

References#

https://cordova.apache.org/news/2015/09/21/file-transfer-release.html
http://www.securityfocus.com/bid/76832

Exploit#

No public exploit known

History#

Version 12015-12-17Record published in the CVE List.
Version 22024-08-06Most recent update recorded in the CVE List.