npm/cordova-android CVE-2016-6799: high 7.5, EPSS 2.58%

Information Exposure in cordova-android

Action: Upgrade cordova-android to 6.0.0 or later.

npm i cordova-android@6.0.0

Affected

Fixed versions

Sources

• osv: GHSA-gwpf-62xp-vrg6
• https://nvd.nist.gov/vuln/detail/CVE-2016-6799
• https://github.com/apache/cordova-android/commit/4a0a7bc424fae14c9689f4a8a2dc250ae3a47f82
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-6799
• https://github.com/apache/cordova-android
• https://lists.apache.org/thread.html/1f3e7b0319d64b455f73616f572acee36fbca31f87f5b2e509c45b69@%3Cdev.cordova.apache.org%3E
• https://snyk.io/vuln/SNYK-JS-CORDOVAANDROID-174935
• https://www.npmjs.com/advisories/964
• http://www.securityfocus.com/bid/98365

CVE-2016-6799 · published 2020-09-11T21:14:49Z · modified 2023-11-08T03:58:33.407118Z · JSON