imPC@ndo IT

Tracker / CVE-2014-3500

CVE-2014-3500

Medium 6.4

Apache Cordova Android before 3.5.1 allows remote attackers to change the start page via a crafted intent URL.

Affected products and versions

apache cordova · … → 3.5.0

Analysis

This page is not indexable yet.Until it carries original analysis — what it actually exposes, how to check in two minutes whether a system was touched, what to do if it was — the page stays noindex. The database decides that, not the template.

References