cordova-plugin-file-transfer@0.4.8 vulnerabilities

Cordova File Transfer Plugin

Direct Vulnerabilities

Known vulnerabilities in the cordova-plugin-file-transfer package. This does not include vulnerabilities belonging to this package’s dependencies.

Automatically find and fix vulnerabilities affecting your projects. Snyk scans for vulnerabilities and provides fixes for free.
Fix for free
Vulnerability Vulnerable Version
  • M
CRLF Injection

cordova-plugin-file-transfer is a Cordova File Transfer Plugin.

Affected versions of the package are vulnerable to CRLF Injection. This allows remote attackers to inject arbitrary headers via CRLF sequences in the filename of an uploaded file.

How to fix CRLF Injection?

Upgrade cordova-plugin-file-transfer to version 1.3.0 or higher.

<1.3.0