CVE

Id
59880  
CVE No.
CVE-2012-6637  
Status
Candidate  
Description
Apache Cordova 3.3.0 and earlier and Adobe PhoneGap 2.9.0 and earlier do not anchor the end of domain-name regular expressions, which allows remote attackers to bypass a whitelist protection mechanism via a domain name that contains an acceptable name as an initial substring.  
Phase
Assigned (20140207)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
606039 59880 CVE-2012-6637 BUGTRAQ:20140124 Security Vulnerabilities in Apache Cordova / PhoneGap  View
606040 59880 CVE-2012-6637 URL:http://seclists.org/bugtraq/2014/Jan/96  View
606041 59880 CVE-2012-6637 MLIST:[oss-security] 20140207 Re: CVE request: multiple issues in Apache Cordova/PhoneGap  View
606042 59880 CVE-2012-6637 URL:http://openwall.com/lists/oss-security/2014/02/07/9  View
606043 59880 CVE-2012-6637 MISC:http://labs.mwrinfosecurity.com/blog/2012/04/30/building-android-javajavascript-bridges/  View
606044 59880 CVE-2012-6637 MISC:http://packetstormsecurity.com/files/124954/apachecordovaphonegap-bypass.txt  View
606045 59880 CVE-2012-6637 MISC:http://www.cs.utexas.edu/~shmat/shmat_ndss14nofrak.pdf  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
30472 JVNDB-2012-006180 ClipBucket におけるクロスサイトスクリプティングの脆弱性 ClipBucket には、クロスサイトスクリプティングの脆弱性が存在します。 CVE-2012-6642 59880 4.3 http://jvndb.jvn.jp/ja/contents/2012/JVNDB-2012-006180.html  View