Unrated severityNVD Advisory· Published Dec 17, 2015· Updated May 6, 2026
CVE-2015-5204
CVE-2015-5204
Description
CRLF injection vulnerability in the Apache Cordova File Transfer Plugin (cordova-plugin-file-transfer) for Android before 1.3.0 allows remote attackers to inject arbitrary headers via CRLF sequences in the filename of an uploaded file.
Affected products
1- cpe:2.3:a:apache:cordova_file_transfer:*:*:*:*:*:android:*:*Range: <=1.2.1
Patches
0No patches discovered yet.
Vulnerability mechanics
AI mechanics synthesis has not run for this CVE yet.
References
2News mentions
0No linked articles in our index yet.