CODEWITHSUNDEEP
androidcordovaibm-mobilefirst
Stijn
Stijn

Reputation: 359

Mobilefirst Vulnerable version of Apache Cordova

I just recieved a mail from Google play about my MobileFirst 6.3 app: Please migrate your app(s) to Apache Cordova v.4.1.1 or higher as soon as possible.

I have a new version of my app on MobileFirst 7.1, but this new version is only running on Cordova v 3.7.0.

Which version of MobileFirst will be based on v4.1.1 and when can we expect it, if it is not out already? What would be your advised approach, release the app based on cordova 3.7.0 quickly while we still can or wait for cordova 4.1.1 to be included in MobileFirst?

As requested: The following page contains more details about the vulnerabilities: https://support.google.com/faqs/answer/6325474

Upvotes: 3

Views: 604

Answers (1)

Idan Adar
Idan Adar

Reputation: 44516

No version of Worklight/MobileFirst is supplied with Cordova 4.1.1.

However,
IBM patches the Cordova version shipped in Worklight/MobileFirst with fixes to found vulnerabilities.

For this particular announcement by Google, see here: https://mobilefirstplatform.ibmcloud.com/blog/2016/02/16/ibm-mobilefirst-platform-foundation-responds-to-google-play-store-announcement-of-blocking-apps-using-vulnerable-cordova-versions/

In general:

Ensure that you are using the latest available Worklight/MobileFirst iFix and have the application re-built in order to use the patched Cordova.

See below for more information:

Upvotes: 3

Related Questions