by Kastro
Paper/Archive/CVE-2023-47883

CVE-2023-47883

mitre — The com.altamirano.fabricio.tvbrowser TV browser application through 4.5.1 for Android is vulnerable to JavaScript code execution via an…

EPSS 2%CVSS 9.8
critical.is priorityof 100
45
CVSS 9.8 (NVD)9.8 / 10 × 3029.4Not in CISA KEV+300.0EPSS percentile 80.0.800 × 2016.0No public exploit+100.0SSVC exploitation: unknown+100.0
Description · from the CVE record

The com.altamirano.fabricio.tvbrowser TV browser application through 4.5.1 for Android is vulnerable to JavaScript code execution via an explicit intent due to an exposed MainActivity.

Affected

ProductAffectedFixed inSource
n/an/a–CNA

Scores by source

NVD9.8CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

References

refgithub.com/actuator/com.altamirano.fabricio.tvbrowser/blob/main/CWE-94.mdrefgithub.com/actuator/com.altamirano.fabricio.tvbrowser/blob/main/AFC-POC.apkrefgithub.com/actuator/com.altamirano.fabricio.tvbrowser/blob/main/TVBrowserDemo.gif