CVE-2018-16202
Directory traversal vulnerability in cordova-plugin-ionic-webview versions prior to 2.2.0 (not including 2.0.0-beta.0, 2.0.0-beta.1, 2.0.0-beta.2, and 2.1.0-0) allows remote attackers to access arbitrary files via unspecified vectors.
- Score
- CVSS 3.1 8.6 High
- Status
- Modified - vultures@jpcert.or.jp
- Published
- 2019-01-09
- Last modified
- 2024-08-05
- Weaknesses
- CWE-22
Affected products
References
- http://jvn.jp/en/jp/JVN60497148/index.html
- https://github.com/ionic-team/cordova-plugin-ionic-webview
- https://jvn.jp/en/jp/JVN69812763/index.html
- https://www.npmjs.com/advisories/746
