Lucene search

K
nvd[email protected]NVD:CVE-2023-47883
HistoryDec 27, 2023 - 9:15 p.m.

CVE-2023-47883

2023-12-2721:15:08
CWE-94
web.nvd.nist.gov
3
cve-2023-47883
javascript execution
explicit intent
mainactivity exposure
security vulnerability

CVSS3

9.8

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

EPSS

0.002

Percentile

56.9%

The com.altamirano.fabricio.tvbrowser TV browser application through 4.5.1 for Android is vulnerable to JavaScript code execution via an explicit intent due to an exposed MainActivity.

Affected configurations

Nvd
Node
vladymixtv_browserRange4.5.1android
VendorProductVersionCPE
vladymixtv_browser*cpe:2.3:a:vladymix:tv_browser:*:*:*:*:*:android:*:*

CVSS3

9.8

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

EPSS

0.002

Percentile

56.9%

Related for NVD:CVE-2023-47883