Beveiligingsadvies

CVE-2023-1384

CVE-kwetsbaarheidsdetails - eXtreme Datacenter Security Operations

Gepubliceerd 2023-05-03 12:10:43

Laatst bijgewerkt 2025-01-30 15:06:49

Toegewezen door Bitdefender

CVSS-score 4.3

Status PUBLISHED

Beschrijving

The setMediaSource function on the amzn.thin.pl service does not sanitize the "source" parameter allowing for arbitrary javascript code to be run This issue affects: Amazon Fire TV Stick 3rd gen versions prior to 6.2.9.5. Insignia TV with FireOS versions prior to 7.6.3.3.

← Alle CVE's bekijken Bekijk op cve.org ↗