CVE-2018-16202

HIGH

cordova-plugin-ionic-webview < 2.2.0 - Path Traversal

Title source: llm
STIX 2.1

Description

Directory traversal vulnerability in cordova-plugin-ionic-webview versions prior to 2.2.0 (not including 2.0.0-beta.0, 2.0.0-beta.1, 2.0.0-beta.2, and 2.1.0-0) allows remote attackers to access arbitrary files via unspecified vectors.

References (4)

Core 4
Core References
Third Party Advisory third-party-advisory x_refsource_jvn
https://jvn.jp/en/jp/JVN69812763/index.html
Third Party Advisory x_refsource_misc
https://www.npmjs.com/advisories/746
Third Party Advisory third-party-advisory x_refsource_jvn
http://jvn.jp/en/jp/JVN60497148/index.html

Scores

CVSS v3 8.6
EPSS 0.0331
EPSS Percentile 87.0%
Attack Vector NETWORK
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:N

Details

CWE
CWE-22
Status published
Products (3)
ionicframework/ionic_web_view 2.0.0
ionicframework/ionic_web_view < 1.2.1
npm/cordova-plugin-ionic-webview 0 - 2.2.0npm
Published Jan 09, 2019
Tracked Since Feb 18, 2026