Tracker / CVE-2019-0219
CVE-2019-0219
Critical 9.8
A website running in the InAppBrowser webview on Android could execute arbitrary JavaScript in the main application's webview using a specially crafted gap-iab: URI.
Affected products and versions
| apache | cordova_inappbrowser · … → 3.0.0 |
|---|---|
| oracle | instantis_enterprisetrack |
| oracle | retail_xstore_point_of_service |
Analysis
This page is not indexable yet.Until it carries original analysis — what it actually exposes, how to check in two minutes whether a system was touched, what to do if it was — the page stays noindex. The database decides that, not the template.