Improper Whitelist Implementation in Apache Cordova-Android

CVE-2015-5256

Summary

This vulnerability in Apache Cordova-Android versions prior to 4.1.0 arises from an inadequate implementation of the JavaScript whitelist protection mechanism. Attackers can exploit this flaw to bypass intended access restrictions when an application relies on connections to a remote server. By crafting a malicious URI, an attacker can gain unauthorized access, potentially leading to the execution of harmful scripts or fetching sensitive data from the vulnerable application.

References