Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-cp9q-6fwr-c66g

Опубликовано: 27 дек. 2023
Источник: github
Github: Не прошло ревью
CVSS3: 9.8

Описание

The com.phlox.tvwebbrowser TV Bro application through 2.0.0 for Android mishandles external intents through WebView. This allows attackers to execute arbitrary code, create arbitrary files. and perform arbitrary downloads via JavaScript that uses takeBlobDownloadData.

The com.phlox.tvwebbrowser TV Bro application through 2.0.0 for Android mishandles external intents through WebView. This allows attackers to execute arbitrary code, create arbitrary files. and perform arbitrary downloads via JavaScript that uses takeBlobDownloadData.

EPSS

Процентиль: 68%
0.00574
Низкий

9.8 Critical

CVSS3

Дефекты

CWE-94

Связанные уязвимости

CVSS3: 9.8
nvd
около 2 лет назад

The com.phlox.tvwebbrowser TV Bro application through 2.0.0 for Android mishandles external intents through WebView. This allows attackers to execute arbitrary code, create arbitrary files. and perform arbitrary downloads via JavaScript that uses takeBlobDownloadData.

EPSS

Процентиль: 68%
0.00574
Низкий

9.8 Critical

CVSS3

Дефекты

CWE-94