Advisory Weakness Curation

Path Traversal in cordova-plugin-ionic-webview Versions of `cordova-plugin-ionic-webview` prior to 2.2.0 are vulnerable to Path Traversal, allowing attackers access to OS local files that should be inaccessible by third-party applications. The package launches a webserver listening on http://localhost:8080 without restricting access of the app itself, thus escaping the iOS application sandbox and accessing local files. ## Recommendation Upgrade to version 2.2.0

Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') Directory traversal vulnerability in cordova-plugin-ionic-webview (not including ) allows remote attackers to access arbitrary files via unspecified vectors.