VULNERABILITY INTELLIGENCE

CVE-2015-5204

CVSS score4.3 MEDIUM
EPSS probability3.43%
CISA KEVNot currently listed
Published2015-12-17
Last modified2026-06-17
CVSS vectorAV:N/AC:M/Au:N/C:N/I:P/A:N

Description

CRLF injection vulnerability in the Apache Cordova File Transfer Plugin (cordova-plugin-file-transfer) for Android before 1.3.0 allows remote attackers to inject arbitrary headers via CRLF sequences in the filename of an uploaded file.

Primary references