Security Apache Cordova Android File Transfer Plugin 1.2.1 Header Injection September 25, 2015 007admin Leave a comment Apache Cordova Android File Transfer plugin versions 1.2.1 and below suffer from an HTTP header injection vulnerability.