Логотип exploitDog
bind:CVE-2023-1384
Консоль
Логотип exploitDog

exploitDog

bind:CVE-2023-1384

Количество 2

Количество 2

nvd логотип

CVE-2023-1384

почти 3 года назад

The setMediaSource function on the amzn.thin.pl service does not sanitize the "source" parameter allowing for arbitrary javascript code to be run This issue affects: Amazon Fire TV Stick 3rd gen versions prior to 6.2.9.5. Insignia TV with FireOS versions prior to 7.6.3.3.

CVSS3: 4.3
EPSS: Низкий
github логотип

GHSA-37fc-xjq7-ff6p

больше 2 лет назад

The setMediaSource function on the amzn.thin.pl service does not sanitize the "source" parameter allowing for arbitrary javascript code to be run This issue affects: Amazon Fire TV Stick 3rd gen versions prior to 6.2.9.5. Insignia TV with FireOS versions prior to 7.6.3.3.

CVSS3: 4.3
EPSS: Низкий

Уязвимостей на страницу

Уязвимость
CVSS
EPSS
Опубликовано
nvd логотип
CVE-2023-1384

The setMediaSource function on the amzn.thin.pl service does not sanitize the "source" parameter allowing for arbitrary javascript code to be run This issue affects: Amazon Fire TV Stick 3rd gen versions prior to 6.2.9.5. Insignia TV with FireOS versions prior to 7.6.3.3.

CVSS3: 4.3
0%
Низкий
почти 3 года назад
github логотип
GHSA-37fc-xjq7-ff6p

The setMediaSource function on the amzn.thin.pl service does not sanitize the "source" parameter allowing for arbitrary javascript code to be run This issue affects: Amazon Fire TV Stick 3rd gen versions prior to 6.2.9.5. Insignia TV with FireOS versions prior to 7.6.3.3.

CVSS3: 4.3
0%
Низкий
больше 2 лет назад

Уязвимостей на страницу