cordova-plugin-advanced-http through 3.3.1 Cookie Leak via Cross-Origin Redirects

Advisories

cordova-plugin-advanced-http through 3.3.1 Cookie Leak via Cross-Origin Redirects

Severity: high
Date: 11/3/2026
Affecting: cordova-plugin-advanced-http <= 3.3.1
CVE: CVE-2026-121554
CWE: CWE-201 Insertion of Sensitive Information Into Sent Data
CVSS: 8.2
CVSS V4 Vector: CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N
References: Pull Request #549
Patch Commit
https://github.com/silkimen/cordova-plugin-advanced-http
https://github.com/silkimen/cordova-plugin-advanced-http/blob/f6c3ea7f66fbe57770f53546e4af16a74bc2e0cf/www/helpers.js#L376
https://github.com/silkimen/cordova-plugin-advanced-http/blob/f6c3ea7f66fbe57770f53546e4af16a74bc2e0cf/src/ios/CordovaHttpPlugin.m#L88-L98
Credit: Giacomo Balli
Description: cordova-plugin-advanced-http through 3.3.1 contains an information disclosure vulnerability that leaks cookies to third-party hosts by forwarding an explicitly set Cookie header across cross-origin redirects. Attackers controlling a redirect target, via an open redirect or attacker-supplied URL, can receive the original host's session cookies and hijack user sessions.

Ready to get Started?

Explore VulnCheck, a next-generation Cyber Threat Intelligence platform, which provides exploit and vulnerability intelligence to help you prioritize and remediate vulnerabilities that matter.

Vulnerability Prioritization
Prioritize vulnerabilities that matter based on the threat landscape and defer vulnerabilities that don't.
Early Warning System
Real-time alerting of changes in the vulnerability landscape so that you can take action before the attacks start.

Schedule a Demo