Friday, April 13, 2018

Fix For Adobe PhoneGap Push Plugin Available

Adobe have released updated version of their PhoneGap Push plugin. This update resolves a Same-Origin Method Execution (SOME) vulnerability (CVE-2018-4943) that exists in PhoneGap apps built with the affected version of the Push plugin. This vulnerability could be exploited to trick users of PhoneGap apps into executing click events and other unintended user interactions.

More information can be read from Adobe security bulletin here.

No comments: