What’s Vulnerable › Vulnerabilities

CVE-2015-5204

• Severity: medium (CVSS 4.3 v2.0)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 3.4% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2015-12-17 · updated 2026-06-17

Description

CRLF injection vulnerability in the Apache Cordova File Transfer Plugin (cordova-plugin-file-transfer) for Android before 1.3.0 allows remote attackers to inject arbitrary headers via CRLF sequences in the filename of an uploaded file.

Affected products

• Apache Cordova File Transfer: through 1.2.1

References

• http://www.securityfocus.com/bid/76832
• https://cordova.apache.org/news/2015/09/21/file-transfer-release.html
• http://www.securityfocus.com/bid/76832
• https://cordova.apache.org/news/2015/09/21/file-transfer-release.html

Get alerted when CVE-2015-5204 or the next vulnerability affects your stack