Security Advisory

CVE-2015-5204

4.3

Vulnerability Description

CRLF injection vulnerability in the Apache Cordova File Transfer Plugin (cordova-plugin-file-transfer) for Android before 1.3.0 allows remote attackers to inject arbitrary headers via CRLF sequences in the filename of an uploaded file.
Published Date December 17, 2015
Official Source NIST NVD Advisory