CVE-2019-0219
A website running in the InAppBrowser webview on Android could execute arbitrary JavaScript in the main application's webview using a specially crafted gap-iab: URI.
Published: 2020-01-14 · CVSS: Unscored
A website running in the InAppBrowser webview on Android could execute arbitrary JavaScript in the main application's webview using a specially crafted gap-iab: URI.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7