PT-2023-30656 · Unknown · Com.Altamirano.Fabricio.Tvbrowser

CVE-2023-47883

·

Publicado

2023-12-27

·

Atualizado

2024-01-09

CVSS v3.1

9.8

Crítica

VetorAV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions com.altamirano.fabricio.tvbrowser TV browser application versions through 4.5.1 for Android
Description The issue allows for JavaScript code execution via an explicit intent due to an exposed MainActivity. This could potentially lead to malicious code being executed on the device.
Recommendations For versions through 4.5.1, consider disabling the explicit intent functionality related to the exposed MainActivity as a temporary workaround until a patch is available. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Code Injection

Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾

Enumeração de Fraquezas

Identificadores relacionados

CVE-2023-47883

Produtos afetados

Com.Altamirano.Fabricio.Tvbrowser