CVE-2023-47883

The com.altamirano.fabricio.tvbrowser TV browser application through 4.5.1 for Android is vulnerable to JavaScript code execution via an explicit intent due to…

published December 27, 2023

CVSS
—
EPSS
2%
Percentile
79.9
In the wild
Unconfirmed
What it is

⚠️ An explicit intent is all it takes for code execution in the com.altamirano.fabricio.tvbrowser app! Think of it as someone sneaking into your house through an open window, just waiting to cause chaos. 🔥 This vulnerability is like a party crasher who waltzes in through a backdoor—if you leave your MainActivity unlocked, any tom, dick, or harry can join the fun and cause mischief! An attacker could run arbitrary JavaScript on the device, potentially accessing sensitive information or disrupting the user's experience. Imagine your favorite show interrupted by unwanted ads or malicious scripts—definitely not the binge-watch experience you signed up for!

Put simply

This vulnerability is like a party crasher who waltzes in through a backdoor—if you leave your MainActivity unlocked, any tom, dick, or harry can join the fun and cause mischief! This flaw allows for JavaScript code execution through an exposed MainActivity when an explicit intent is used, enabling unauthorized access to the app's functionality.

What to do

An attacker could run arbitrary JavaScript on the device, potentially accessing sensitive information or disrupting the user's experience. Imagine your favorite show interrupted by unwanted ads or malicious scripts—definitely not the binge-watch experience you signed up for! Update the com.altamirano.fabricio.tvbrowser app to version 4.5.2 or later to mitigate this vulnerability. Additionally, review the app's intent filters and restrict exposure to sensitive activities. 🚀 Don't worry! With these updates, you'll be back to a secure viewing experience in no time. You've got this! 🛡️

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01930 · 79.9th percentile
Published
2023-12-27T00:00Z
EPSS history
Timeline
  • 27 DEC 00:00Z
    The com.altamirano.fabricio.tvbrowser TV browser application through 4.5.1 for Android is vulnerable to JavaScript code execution via an explicit intent due to…
    cvelistv5