Unrated severityNVD Advisory· Published Dec 17, 2015· Updated Jun 17, 2026

CVE-2015-5204

Description

CRLF injection vulnerability in the Apache Cordova File Transfer Plugin (cordova-plugin-file-transfer) for Android before 1.3.0 allows remote attackers to inject arbitrary headers via CRLF sequences in the filename of an uploaded file.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

Apache/Cordova File Transfer
cpe:2.3:a:apache:cordova_file_transfer:*:*:*:*:*:android:*:*
Range: <=1.2.1
Apache Cordova/cordova-plugin-file-transferllm-create
Range: <1.3.0

Patches

Vulnerability mechanics

References

cordova.apache.org/news/2015/09/21/file-transfer-release.htmlnvdVendor Advisory
www.securityfocus.com/bid/76832nvd

News mentions

No linked articles in our index yet.

cvss	0.000
epss	0.003
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000