NVD Vulnerability Detail

CVE-2014-0073

Summary	The CDVInAppBrowser class in the Apache Cordova In-App-Browser standalone plugin (org.apache.cordova.inappbrowser) before 0.3.2 for iOS and the In-App-Browser plugin for iOS from Cordova 2.6.0 through 2.9.0 does not properly validate callback identifiers, which allows remote attackers to execute arbitrary JavaScript in the host page and consequently gain privileges via a crafted gap-iab: URI.
Publication Date	Oct. 31, 2017, 4:29 a.m.
Registration Date	Jan. 26, 2021, 3:04 p.m.
Last Update	Nov. 21, 2024, 11:01 a.m.

Affected software configurations

Configuration1		or higher	or less	more than	less than
cpe:2.3:a:apache:cordova_in-app-browser::::::iphone_os::*			0.3.1

Configuration2		or higher	or less	more than	less than
cpe:2.3:a:apache:cordova::::::iphone_os::*		2.6.0	2.9.0

Related information, measures and tools

No	URL	タグ
1	http://d3adend.org/blog/?p=403	Issue Tracking Third Party Advisory
2	http://d3adend.org/blog/?p=403	Issue Tracking Third Party Advisory
3	http://seclists.org/fulldisclosure/2014/Mar/30	Mailing List Third Party Advisory
4	http://seclists.org/fulldisclosure/2014/Mar/30	Mailing List Third Party Advisory
5	http://www.securityfocus.com/archive/1/531334/100/0/threaded
6	http://www.securityfocus.com/archive/1/531334/100/0/threaded
7	http://www.securityfocus.com/bid/65959	Third Party Advisory VDB Entry
8	http://www.securityfocus.com/bid/65959	Third Party Advisory VDB Entry
9	https://exchange.xforce.ibmcloud.com/vulnerabilities/91560	Issue Tracking Third Party Advisory VDB Entry
10	https://exchange.xforce.ibmcloud.com/vulnerabilities/91560	Issue Tracking Third Party Advisory VDB Entry
11	https://github.com/apache/cordova-plugin-inappbrowser/commit/26702cb0720c5c394b407c23570136c53171fa55	Issue Tracking Patch Vendor Advisory
12	https://github.com/apache/cordova-plugin-inappbrowser/commit/26702cb0720c5c394b407c23570136c53171fa55	Issue Tracking Patch Vendor Advisory
13	https://mail-archives.apache.org/mod_mbox/cordova-dev/201403.mbox/%3CCAK_TSXLGJag5Q9ATUCbFtkWvMWX9XnC80kKp-HKi25gPcvV4gw%40mail.gmail.com%3E
14	https://mail-archives.apache.org/mod_mbox/cordova-dev/201403.mbox/%3CCAK_TSXLGJag5Q9ATUCbFtkWvMWX9XnC80kKp-HKi25gPcvV4gw%40mail.gmail.com%3E

Common Vulnerabilities List

No	CWE	Name	URL
1	CWE-264	認可・権限・アクセス制御	https://cwe.mitre.org/data/definitions/264.html

JVN Vulnerability Information

Apache Cordova の In-App-Browser プラグインおよび In-App-Browser スタンドアローンプラグインにおける認可・権限・アクセス制御に関する脆弱性

Title	Apache Cordova の In-App-Browser プラグインおよび In-App-Browser スタンドアローンプラグインにおける認可・権限・アクセス制御に関する脆弱性
Summary	Apache Cordova の In-App-Browser プラグインおよび In-App-Browser スタンドアローンプラグインには、認可・権限・アクセス制御に関する脆弱性が存在します。
Possible impacts	情報を取得される、情報を改ざんされる、およびサービス運用妨害 (DoS) 状態にされる可能性があります。
Solution	ベンダより正式な対策が公開されています。ベンダ情報を参照して適切な対策を実施してください。
Publication Date	March 4, 2014, midnight
Registration Date	Nov. 24, 2017, 2:24 p.m.
Last Update	Nov. 24, 2017, 2:24 p.m.

Affected System

Apache Software Foundation

Apache Cordova 2.6.0 から 2.9.0

cordova-plugin-inappbrowser 0.3.2 未満

CVE (情報セキュリティ共通脆弱性識別子)

No	Name	URL
Common Vulnerabilities and Exposures (CVE)
1	CVE-2014-0073	http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0073
National Vulnerability Database (NVD)
2	CVE-2014-0073	https://nvd.nist.gov/vuln/detail/CVE-2014-0073

CWE (共通脆弱性タイプ一覧)

No	Name	URL
JVNDB
1	CWE-264	https://jvndb.jvn.jp/ja/cwe/CWE-264.html

ベンダー情報

No	Name	URL
ASF Mail Archives
1	[CVE-2014-0073] Apache Cordova In-App-Browser privilege escalation	https://mail-archives.apache.org/mod_mbox/cordova-dev/201403.mbox/%3CCAK_TSXLGJag5Q9ATUCbFtkWvMWX9XnC80kKp-HKi25gPcvV4gw@mail.gmail.com%3E
GitHub
2	Validate that callbackId is correctly formed	https://github.com/apache/cordova-plugin-inappbrowser/commit/26702cb0720c5c394b407c23570136c53171fa55

Change Log

No	Changed Details	Date of change
0	[2017年11月24日] 掲載	Feb. 17, 2018, 10:37 a.m.