CVE-2023-47883

The com.altamirano.fabricio.tvbrowser TV browser application through 4.5.1 for Android is vulnerable to JavaScript code execution via an explicit intent due to an exposed MainActivity.
Code Injection
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTNIST
9.8 CRITICAL
NETWORK
LOW
NONE
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
mitreCNA
---
---
CVEADP
---
---
Base Score
CVSS 3.x
EPSS Score
Percentile: 78%
Common Weakness Enumeration
References
https://github.com/actuator/com.altamirano.fabricio.tvbrowser/blob/main/AFC-POC.apk
https://github.com/actuator/com.altamirano.fabricio.tvbrowser/blob/main/CWE-94.md
https://github.com/actuator/com.altamirano.fabricio.tvbrowser/blob/main/TVBrowserDemo.gif
https://github.com/actuator/com.altamirano.fabricio.tvbrowser/blob/main/AFC-POC.apk
https://github.com/actuator/com.altamirano.fabricio.tvbrowser/blob/main/CWE-94.md
https://github.com/actuator/com.altamirano.fabricio.tvbrowser/blob/main/TVBrowserDemo.gif