CVE-2018-4943
HIGHAdobe PhoneGap Push Plugin < 1.8.0 - Same-Origin Method Execution
Title source: llmDescription
Adobe PhoneGap Push Plugin versions 1.8.0 and earlier have an exploitable Same-Origin Method Execution vulnerability. Successful exploitation could lead to JavaScript code execution in the context of the PhoneGap app.
References (2)
Core 2
Core References
Third Party Advisory x_refsource_misc
https://helpx.adobe.com/security/products/phonegap/apsb18-15.html
Third Party Advisory, VDB Entry vdb-entry
x_refsource_bid
http://www.securityfocus.com/bid/103710
Scores
CVSS v3
8.8
EPSS
0.0687
EPSS Percentile
93.3%
Attack Vector
NETWORK
CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Details
CWE
CWE-20
Status
published
Products (1)
adobe/push_notifications
< 1.8.0
Published
May 19, 2018
Tracked Since
Feb 18, 2026