Lucene search

K
prionPRIOn knowledge basePRION:CVE-2023-1384
HistoryMay 03, 2023 - 1:15 p.m.

Code injection

2023-05-0313:15:00
PRIOn knowledge base
www.prio-n.com
3
amzn.thin.pl
setmediasource
code injection
amazon fire tv stick
insignia tv
fireos
security issue

6.4 Medium

AI Score

Confidence

High

0.0005 Low

EPSS

Percentile

18.2%

The setMediaSource function on the amzn.thin.pl service does not sanitize the “source” parameter allowing for arbitrary javascript code to be run

This issue affects:

Amazon Fire TV Stick 3rd gen versions prior to 6.2.9.5.
Insignia TV with FireOS versions prior to 7.6.3.3.

CPENameOperatorVersion
fire_oslt6.2.9.5
fire_oslt7.6.3.3

6.4 Medium

AI Score

Confidence

High

0.0005 Low

EPSS

Percentile

18.2%

Related for PRION:CVE-2023-1384