critical9.8
CVE-2023-47883
The com.altamirano.fabricio.tvbrowser TV browser application through 4.5.1 for Android is vulnerable to JavaScript code execution via an explicit intent due to…
Impact
The com.altamirano.fabricio.tvbrowser TV browser application through 4.5.1 for Android is vulnerable to JavaScript code execution via an explicit intent due to an exposed MainActivity.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Vladymix | Tv Browser | through 4.5.1 |
Weakness classification
References
- NVD record
- CVE.org record
- https://github.com/actuator/com.altamirano.fabricio.tvbrowser/blob/main/AFC-POC.apk
- https://github.com/actuator/com.altamirano.fabricio.tvbrowser/blob/main/CWE-94.md
- https://github.com/actuator/com.altamirano.fabricio.tvbrowser/blob/main/TVBrowserDemo.gif
- https://github.com/actuator/com.altamirano.fabricio.tvbrowser/blob/main/AFC-POC.apk
- https://github.com/actuator/com.altamirano.fabricio.tvbrowser/blob/main/CWE-94.md
- https://github.com/actuator/com.altamirano.fabricio.tvbrowser/blob/main/TVBrowserDemo.gif