High severity8.6NVD Advisory· Published Jan 9, 2019· Updated Jun 17, 2026
CVE-2018-16202
CVE-2018-16202
Description
Directory traversal vulnerability in cordova-plugin-ionic-webview versions prior to 2.2.0 (not including 2.0.0-beta.0, 2.0.0-beta.1, 2.0.0-beta.2, and 2.1.0-0) allows remote attackers to access arbitrary files via unspecified vectors.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected packages
Versions sourced from the GitHub Security Advisory.
| Package | Affected versions | Patched versions |
|---|---|---|
cordova-plugin-ionic-webviewnpm | < 2.2.0 | 2.2.0 |
Affected products
2- npm, Inc./cordova-plugin-ionic-webviewv5Range: versions prior to 2.2.0 (not including 2.0.0-beta.0, 2.0.0-beta.1, 2.0.0-beta.2, and 2.1.0-0)
Patches
Vulnerability mechanics
References
5- jvn.jp/en/jp/JVN60497148/index.htmlnvdThird Party AdvisoryWEB
- github.com/advisories/GHSA-xwjh-cp99-cj8qghsaADVISORY
- jvn.jp/en/jp/JVN69812763/index.htmlnvdThird Party AdvisoryWEB
- nvd.nist.gov/vuln/detail/CVE-2018-16202ghsaADVISORY
- www.npmjs.com/advisories/746nvdThird Party AdvisoryWEB
News mentions
0No linked articles in our index yet.