CVE-2014-3502: Apache Cordova

Medium severity, CVSS 4.3. EPSS: 5% chance of exploitation in the next 30 days.

Apache Cordova Android before 3.5.1 allows remote attackers to open and send data to arbitrary applications via a URL with a crafted URI scheme for an Android intent.

Affected products

• Apache Cordova: version 3.5.0 only

Published 2014-11-15. Last modified 2026-06-17.