CVE-2020-11990

Published: Dec 1, 2020Modified: Nov 21, 2024

3.3

Vector

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N

Exploitability: 1.8 / Impact: 1.4

Source: NVD

Description

We have resolved a security issue in the camera plugin that could have affected certain Cordova (Android) applications. An attacker who could install (or lead the victim to install) a specially crafted (or malicious) Android application would be able to access pictures taken with the app externally.

Affected (1)

Products: Apache: Cordova

1 product

Configuration A

1 vulnerable

Vulnerable Software	Affected Versions
Apache Cordova	Version 4.1.0

References (4)

http://jvn.jp/en/jp/JVN59779918/index.html

Source: security@apache.org

Third Party Advisory

https://cordova.apache.org/news/2020/09/18/camera-plugin-release.html

Source: security@apache.org

Release NotesVendor Advisory

http://jvn.jp/en/jp/JVN59779918/index.html

Source: af854a3a-2127-422b-91ae-364da2661108

Third Party Advisory

https://cordova.apache.org/news/2020/09/18/camera-plugin-release.html

Source: af854a3a-2127-422b-91ae-364da2661108

Release NotesVendor Advisory

Timeline

No history available yet.