CVE-2012-6637

CVE-2012-6637 describes a whitelist bypass vulnerability in Apache Cordova 3.3.0 and earlier, and Adobe PhoneGap 2.9.0 and earlier. The flaw stems from unanchored regular expressions used for domain-name validation, allowing attackers to bypass security by using a domain name that begins with an authorized substring. With a CVSS score of 7.5, this vulnerability is considered high severity, enabling remote attackers to achieve partial confidentiality, integrity, and availability impacts with low attack complexity. There is no evidence of active exploitation, public exploit code (Metasploit, Nuclei, ExploitDB), or significant community discussion surrounding this CVE.